[WEB SECURITY] Classic examples for secure webapps

[Sebastian Schinzel]

Dear all,

Two examples come to my mind when I think about classic examples of
secure software development: OpenSSH and Qmail. Both

a) were designed with security in mind
b) were heavily audited (--> open source)
c) are widely used in security sensitive environments for long times (> 10 years) 
d) had relatively few known security bugs despite b), and c).

My question is:
Are there any web applications that can be seen as a classic example of
secure software development on the web (similar to OpenSSH and  Qmail
in the network service area)?

Thanks,
Sebastian

---
Sebastian Schinzel

Universität Erlangen-Nürnberg
Lehrstuhl für Informatik 1
IT-Sicherheitsinfrastrukturen

Web: 	http://www1.cs.fau.de/
Twitter:	http://twitter.com/seecurity