Dropbox authentication: insecure by design http://dereknewton.com/2011/04/dropbox-authentication-static-host-ids Saved on Apr 07, 2011 Internet Archive
