> Surely you are not suggesting something like if, I have > > selector -> require ESP with 3DES > > IKE negotiation could change this into > > selector -> allow data in clear or, almost as bad: -> allow ESP with crackable crypto. - Bill