Hi Paul, > Maarten, shall I apply these changes and send you a revised version? Why me in particular? > [BTW, please check RFC-3552; it says we MUST talk about certain attacks, like > replay] I think it is good to keep the text as complete as it is now (with the few agreed changes), so that we can forestall any security discussions.