Derrick J Brashear wrote: This can be done without requiring a large number of clients to be keyed. If you don't see that as an improvement, um, I guess we have a disconnect. Of course it's an improvement. I'm just not convinced that making afs depend on public key infrastructure is the price I want to pay for this. But I'm willing to be convinced.