Is this a theoretical issue, or have you seen it in widespread use? I thought most servers these days picked what they wanted, and used the client ordering as a suggestion, at best. -- Principal Security Engineer, Akamai Technologies IM: rsalz at jabber.me Twitter: RichSalz