Permissions on directory reset as per Alex' warning. I'll look into getting the certificate, noting that many sites I go to these days squawk about outdated or missing ones. A good tutorial on how to get them and where to put them would be valuable. There was a question about knowledge of PKI -- I actually introduced this to Treasury Board in a contract in 1979, but the implementation and usage details are always arcane. These details form the major (and in my opinion from a risk point of view fatal) flaw in using it, leading to the "post-it note on the screen with password" level of response from users. Making it user-friendly to non-geeks seems really difficult. Best, JN