It seems to be that MSIE V2.0 transmits its data in the clear once it has transmitted the client hello and received the server hello SSL records in some limited circumstance or other. I don't know how widely this bug exists. Neither do I know which versions other than the French one has it. However, if you point your version of MSIE at https://beta.mkn.co.uk/help/system/msie and it indicates that the client has encryption problems. Then you have that problem as well. I would watch this one. Anyone feeling like tracing the packets will find it easier to crack than 2 bit SSL. (let alone 40 bit or 128 bit). Any thoughts?