> It works for road-warrior VPNs :) that's nice. > In other cases, you probably aren't authenticating users to users, or > hosts to users, but rather hosts to hosts. This is an unwarranted assumption, and the ipsec implementation i'm working on doesn't make that assumption. > So I don't think it matters there, either. I think it does. - Bill