> > 2.2 Perfect forward secrecy (PFS) > The ability to trade the level of PFS (amount of traffic potentially exposed) vs. overhead is a useful approach. As long as it does not introduce a new way to create a misconfiguration, either approach seems acceptable. -- Gary Grebus Hewlett-Packard Company Tru64 UNIX Base OS Networking Gary.Grebus@hp.com