most secure way to host with lisp?

I don't dare use any of the http server libraries, as I bet all of them have an exploit or two. mod_lisp is crap. It sends query information on a socket to another lisp process, which is lame. I suppose that is useful for load balancing, but it's still lame. I could just use racket, but that also probably has an exploit or two. I think I will review the entirety of tinyscheme and then recompile it into an apache module. What do you think?

>>7
That's all nice and good, but my options are reduced once I insist that it has SSL and is well tested. I could use a chicken apache module though.

>>8
SSL, aint hard, and you can test it, and update the wiki:
http://www.cliki.net/site/history?article=Web

Here 3 from the that list that have an SSL implementation:
http://www.franz.com/support/documentation/current/doc/aserve/aserve.html#ssltls
http://wookie.beeets.com/docs
http://weitz.de/hunchentoot/

Hunchentoot, being your best solution (The Apache in CL).

If you are looking for utilities to do security audits, here are some:
http://openxdas.sourceforge.net/
http://www.trustedbsd.org/openbsm.html

You can also create you own, and ask others to test out your beta trial environments, provided you incentive them to.

Now give me a cookie.