Jif seems to have superseded this Swift (the secure web one): http://www.cs.cornell.edu/jif/