Implementing Email and Security Tokens by Russ Housley & Sean Turner