Mr. Harris should pick up a copy of "SSL and TLS: Designing and Building
Secure Systems" by Eric Rescorla
http://www.amazon.com/exec/obidos/ASIN/0201615983/o/qid=991693616/sr=8-1/ref=aps_sr_b_1_1/107-5429842-6257327
This book can be a bit intimidating for the cryptographic novice. However,
it does a great job of explaining SSL and the security issues behind using
it. It also has example code that uses the OpenSSL libraries. I recommend
this book for anyone who works with SSL, even if they don't use OpenSSL (or
Eric's PureTLS Java library).
Marc
