Guy- here is section on authentication and trust. It needs cleaning up, but I think it is useful. Note that sections 3 and 4 are defined not to be part of version 1 - which I think is helpful -- to identify an issue and explicitly exclude it. Sorry to be late with this - I tried to make it as simple as I could. Some conversation will probably help. John