Carlisle, Is there an official statement from the IETF that says key recovery/generation/escrow should be part of PKIX? -- Mark Shuttleworth Thawte Consulting