The Public Key Infrastructure solves many security problems, but also introduces risks that require careful management. Nick Barron reports