At NANOG yesterday, I had to get up and explain to folks just why IPSEC products didn't really interoperate all that well yet. I think that on this group, we know the answers -- and yes, certificate issues are near the top of the list. --Steve Bellovin