This looks like a great Q&A from Mozilla’s (quite impressively big) security team:
http://www.reddit.com/r/netsec/comments/1b3vcx/we_are_the_mozilla_security_community_ask_us/
Definitely one to grab a cup of coffee and read :)
Question: is there a way to create PDFs or eBook versions from Reddit threads like this?