Security and privacy for the open web