Stephen Kent wrote: > > This WG is not responsible for broken implementations. I disagree. If a standard is very complicated and features are most times optional it's difficult too implement it correctly and complete. Therefore the designers of a security standard are IMHO indeed somewhat responsible for broken implementations. Ciao, Michael.