diff --git a/bib.bib b/bib.bib
index 5ecf45c..78150f6 100644
--- a/bib.bib
+++ b/bib.bib
@@ -1,75 +1,89 @@
 @Misc{openpgp-working-group-charter,
   author =       {{OpenPGP} Working Group},
   title =        {Charter for Working Group},
   note =      {\url{https://datatracker.ietf.org/wg/openpgp/charter/}}}
 
 @techreport{RFC4880,
   author = {J. Callas and L. Donnerhacke and H. Finney and D. Shaw and R. Thayer},
   title = {OpenPGP Message Format},
   howpublished = {Internet Requests for Comments},
   type = {RFC},
   number = {4880},
   year = {2007},
   month = {November},
   issn = {2070-1721},
   publisher = {RFC Editor},
   institution = {RFC Editor},
   url = {http://www.rfc-editor.org/rfc/rfc4880.txt},
   note = {\url{http://www.rfc-editor.org/rfc/rfc4880.txt}},
 }
 
 @Misc{gosney2016linkedin-password-sloppiness,
   author =    {Jeremi M. Gosney},
   title =     {How {LinkedIn's} password sloppiness hurts us all},
   howpublished = {\url{https://arstechnica.com/security/2016/06/how-linkedins-password-sloppiness-hurts-us-all/}},
   month =     jun,
   year =      2016}
 
 @Misc{callas2009mdc,
   author =    {Jon Callas},
   title =     {Re: A review of hash function brittleness in {OpenPGP}},
   howpublished = {\url{https://www.ietf.org/mail-archive/web/openpgp/current/msg00468.html}},
   month =     jan,
   year =      2009}
 
 @Misc{autocrypt-bad-import,
   title =     {Autocrypt Level 1: Enabling encryption, avoiding annoyances - bad import},
   howpublished = {\url{https://autocrypt.readthedocs.io/en/latest/bad-import.html}}}
 
 @Misc{koch2013clearsign-text-document-with-multiple-keys,
   author =    {Werner Koch},
   title =     {Clearsign text document with multiple keys?},
   howpublished = {https://lists.gnupg.org/pipermail/gnupg-users/2013-July/047118.html},
   month =     jul,
   year =      2013}
 
 @Misc{brown2001forward-secrecy-for-openpgp,
   author =    {Ian Brown and Adam Back and Ben Laurie},
   title =     {Forward Secrecy Extensions for OpenPGP},
   howpublished = {\url{https://tools.ietf.org/html/draft-brown-pgp-pfs-03}},
   month =     oct,
   year =      2001}
 
 @Misc{debian-notations,
   author =    {Daniel Kahn Gillmor},
   title =     {using OpenPGP notations to indicate keysigning practices},
   howpublished = {\url{https://lists.debian.org/debian-devel/2009/06/msg00722.html}},
   month =     jun,
   year =      2009}
 
 @Misc{gutmann-too-good-enough,
   author =    {Peter Gutmann},
   title =     {[openpgp] Expiration impending: <draft-ietf-openpgp-rfc4880bis-01.txt>},
   howpublished = {\url{https://www.ietf.org/mail-archive/web/openpgp/current/msg08863.html}},
   month =     jul,
   year =      2017}
 
 @Article{mister2005cfb-attack,
   author =       {Mister, Serge and Zuccherato, Robert},
   title =        {An Attack on {CFB} Mode Encryption As Used By {OpenPGP}},
   booktitle =    {Selected Areas in Cryptography},
   volume =       {3897},
   pages =        {82--94},
   organization = {Springer},
   year = 2005
 }
+
+@Misc{gillmor-user-id-comments,
+  author =    {Daniel Kahn Gillmor},
+  title =     {OpenPGP User ID Comments considered harmful},
+  howpublished = {\url{https://debian-administration.org/users/dkg/weblog/97}},
+  month =     may,
+  year =      2013}
+
+@Misc{gillmor-cert-level,
+  author =    {Daniel Kahn Gillmor},
+  title =     {gpg --ask-cert-level considered harmful},
+  howpublished = {\url{https://debian-administration.org/users/dkg/weblog/98}},
+  month =     may,
+  year =      2013}