I see that my review has just crossed with a new version of the draft (-26). I have had a quick look and the vast majority of the review still applies. The main piece of update in -26 addresses a comment I made about the Kerberos algorithms being insecure, which has obviously come in from other sources. Regards, Elwyn Sent from my ASUS Pad