>" The point I was making here is that having a single PKI root does not in fact do anything to achieve the end that they describe. " Phillip - Are you referring to having a single PKI root not making sense for: A) the purpose of anchoring a single IP address hierarchy or B) the purpose of anchoring a single "true route" hierarchy, or C) Not making sense for both A and B? Thanks! /John