This article is a good list of implementation flaws with RSA, both in parameter selection and protocols. However, I disagree with the recommendation to use ECI

This article is a good list of implementation flaws with RSA, both in parameter selection and protocols. However, I disagree with the recommendation to use ECIES. It has a separate MAC and encryption algorithm approach which is better served by AEAD algorithms these days.