The most dangerous code: Validating SSL certs in non-browser software (2012) [pdf]cs.cornell.edu·14 pts·ripe·4