You should read http://corte.si/posts/security/hostproof.html and http://corte.si/posts/security/crypsr.html. Was also discussed here - http://news.ycombinator.com/item?id=1226277