Summer has arrived and so has the traditional time for site changes (along with the usual outdoor activities). We're kicking around ideas for new features and improvements that we can make to the site and still keep it accessible to the widest range of clients possible while adhering to the KISS rule. With some of the features and ideas we're considering implementing we don't think that it will be manageable or scalable if we stick strictly with our original design concept. We don't want to abandon any of our users, some of whom are still using 2.x and 3.x browsers! It's a tough call and reducing administrative overhead is something we hope to accomplish with any updates.
CSS looks like a must just because even we're getting a little tired of looking at the original design. The aphorism "If it isn't broken don't fix it," comes to mind as we're considering this. The other thing we're trying to figure out with respect to CSS is whether or not we should go back and bring the old pages up to the new spec or leave them as is. There is an argument to be made for leaving them alone for historical/archival purposes (Web Archive notwithstanding). It's unclear which way we'll go but there seems to be a leaning to leaving the original pages as is.
Someone pointed out to us a while back that Bruce Schneier gave us a nod in his Crypto-Gram Newsletter for our interview with Gene Spafford. While it doesn't have any direct effect on what we're doing on the project, and we know we have a long list of accomplished users, it's nice to know that our efforts are appreciated by someone like him. It amounts to a public vote of confidence from someone whom a lot of people respect as an authoritative source on all matters security-related.