The most dangerous code in the world: validating SSL certificates in non-browser software.

Martin Georgiev, Subodh Iyengar, Suman Jana, Rishita Anubhai, Dan Boneh, Vitaly Shmatikov

Browse the full CCS paper archive.