Jeff, the SSL specification has a severe *architectural* problem - it assumes that Internet Protocols are APIs ... The IETF quite explicitly doesn't care about APIs

With one exception so important that it might blow away your whole complaint... ...GSSAPI. /r$