http://www.wired.com/threatlevel/2008/10/ten-years-later/
That doesn't make its implementation or provisions perfect...