So there's a point mentioned in the DMZ in relation to SSL questions (prompted by this question), which I think warrants a general discussion.
Where we have an area of security where the "best practice" changes regularly, should we be closing/discouraging questions in those areas?
The problem with these questions seems similar to the shopping questions, in that the answers will not stand the test of time.
The problem with not allowing these questions is that we may rule out a legitimately useful area of security advice (with the obvious example in this case being advice on SSL suites, which is a common query from web server admins)
If we do decide to allow these, should there be some policy on maintenance/cleanup of old answers?