Karl Fox writes: > So will these forthcoming authentication+opacity transforms > authenticate the outermost IP header the way AH does? You bring up an interesting question. Perhaps they should. This is a matter for discussion. Perry