The ABA PKI Assessment Guidelines (PAG) were the culmination of 5 years research and analysis by the best e-commerce lawyers and technologists. While the PAG is a little dated (this draft is from 2001) and pre-dates contemporary "closed" PKIs where the legal issues are far simpler, the document remains an excellent source of material for the cross-over area of technology law.