Phil: The more that I look at cookies, I realize that they are only needed because Phorutis is running over a connectionless service (IP/UDP). If you were to run over a connection-oriented service like TCP, the connection establishment would provice the liveness checking that you need. Why do you think that key management must be run on IP/UDP? Russ