From: Andrew Loewenstern I ask: "Who Cares?" It is easy enough to distribute with the secure-non-GAK plug-in a patch for disabling the module authentication. Heck, you could even make an ActiveX applet that did it... andrew "Click Here to Download and Install Real Crypto" .................................................... Like PGP, it would need to be widely (& anonymously) made available before anyone could do anything about it.... .. Blanc