there is slightly related thread running in sci.crypt newsgroup ("Attacks on a
PKI") ... i've archived some of my postings at:
http://www.garlic.com/~lynn/99.html#226
http://www.garlic.com/~lynn/99.html#228
the full thread is available from places like dejanews