Painful lessons from the Web PKI, and how you can avoid them [pdf]datatracker.ietf.org2 pointsfanf26 years ago