In the typical VPN scenario (either gateway-to-gateway or remote-access WAN): - PFS is a real requirement for some but not all user scenarios --Paul Hoffman, Director --VPN Consortium