Mark, ESP is also a transport-layer encryptor, not just an IP-layer encryptor (read the draft). Your argument fails. Ran atkinson@itd.nrl.navy.mil