(If they're security holes, should they be documented at all?) Minor rewrites.
Adjust markup for hyperlinking to the relevant RFCs. Give it a little organization. Minor nits.