Pretty good answer, Hugh. I think it contains most (perhaps all) of what was missing from the Security Considerations. Thanks. Any other comments? - This is the IPSECKEY@sandelman.ca list. Email to ipseckey-request@sandelman.ca to be removed.