Scott, >It is always the customers choice to develop their security model based on >their threat model. To impose a solution, sometimes makes a customer more >nervous. If only this were true I'd be more comfortable. I almost never find a customer who has a written description of a threat model, and most can't even correctly define "threat." Steve