  Rigorous mathematical proofs of the security of continuous-variable quantum
key distribution (CV QKD) have been obtained recently. Unfortunately, these
security proofs rely on assumptions that are hardly met in experimental
practice. Here I investigate these issues in detail, and discuss
experimentally-friendly workarounds to assess the security of CV QKD. The aim
of this paper is to show that there are hidden and unsolved issues and to
indicate possible partial solutions. To provide a complete and rigorous
mathematical security proof is out of the scope of this contribution.
