Any idea? Mail me: hatter#openwebsecurity.org
HTTP Secure Headers
Decentralized Application Security Project (or DASP) Top 10: https://dasp.co/
3rd party slides:
Qualys_SSL_Labs-State_of_SSL_InfoSec_World_April_2011.pdf