Derek, You are right, I do tend to equate web of trust with PGP. Perhaps I have missed the published papers on that describe "web of trust" in more than casual terms. Since PGP itself has had a tendency to be defined more by its implementation, than by an implementation independent specification, this too may have lead to some of the confusion. Steve