Makes me wonder: What's the current (informal) status of the certificate-from-dns drafts? Viele Grüße Arnt Gulbrandsen