@alan Just to drive home the point, this is always worth a repost:
cybergibbons.com/security-2/wh