Re: Issue #1 proposed resolution

> Can you explain where this high price comes from?

Signing them?

> I'd much rather have references to these things that I could pass
> around to many different types of applications, rather than a private
> identification scheme (<row>33</row>) known only to this one app.

Doing the moral equivalent of that (i.e., encrypted Cookie's) is the 
only other way I can see to guarantee end-to-end security...

	/r$

-- 
Rich Salz, Chief Security Architect
DataPower Technology                           http://www.datapower.com
XS40 XML Security Gateway   http://www.datapower.com/products/xs40.html
XML Security Overview  http://www.datapower.com/xmldev/xmlsecurity.html