Inside risks: Risks in email security
Communications of the ACM
Albert Levi
How to incorporate revocation status information into the trust metrics for public-key certification