On Wed, 20 Mar 2002 17:17:58 PST you wrote > This is is a problem that can be solved generally as an IPsec issue, > it doesn't have to be solved by each key management protocol. It is being solved as an IPsec issue. And no one said each key management protocol has to solve it, just the one used by IPsec. Dan.