Hi all,
   (I created this gmail address for twitter for Project PicketBox. I may as well use it for mailing lists).

Shane and I had a couple of days of intense discussion on security at Brisbane last week. Some of those discussions were fed back into the PicketBox project. 

Read more on Project PicketBox here:
http://anil-identity.blogspot.com/2010/03/project-picketbox-security-for-java.html

I guess when Seam 3 is released, we are going to offload majority of the security code to PicketBox.

I will be loitering around this dev list to basically answer any security related questions.

Regards,
Anil Saldhana