The road to a successful introduction of vehicular communications has to pass through the analysis of potential security threats and the design of a robust security architecture able to cope with these threats. In this paper, we undertake this challenge. In addition to providing a survey of related academic and industrial efforts, we also outline several open problems.