Another problem I found was with a research partner that has
highly confidential data.
I wanted to build an application that uses this data using OACS,
but they require the webserver to be CERT certified, I will try to
find out more, but apparently some servers are "certified" as
secure by CERT. I don't know how you get it certified, it might be
a matter of  $ .
Anyway, AOLserver is not.