[zimbatm]

The last answer could be even better if it included an actual list of things that have been checked against:

What testing methodology did you use, what form of vulnerability or classes of errors does it prevent (valgrind, ...). Has the code been formally verified ?

What are the attack scenarios that you have considered. What are those you don't prevent (physical access, system compromise, user compromise).

What are the knows and known unknowns.

[Swannie]

:-) The slight tone of sarcasm was there if you were looking for it.

Ultimately it comes down to "Trust us". Unless you are well versed in computer security, anything other than what I wrote, is meaningless. Even the rootkit stuff I put there is above the head of the average computer user (we're probably talking the 98th percentile and above that would understand what a rootkit is).

Probably talking the 99.99th percentile for what's above.