At the RSA conference, I came across an interesting-looking tome called _Federal Certification Authority Liability and Policy: Law and Policy of Certificate-Based Public Key and Digital Signatures_. It seems that we can obtain this thing from NIST for a modest fee of $61, but I'm wondering if there might be an online version around somewhere. Does anyone know? -- Mark Chen chen@intuit.com 415/329-6913 finger for PGP public key D4 99 54 2A 98 B1 48 0C CF 95 A5 B0 6E E0 1E 1D