Inside risks: Risks in email security
Communications of the ACM
Çetin Kaya Koç
How to incorporate revocation status information into the trust metrics for public-key certification