>To the best of my knowledge, SASL supports authentication, but not >(application-level) encryption, whereas the GSS-API supports authentication >and encryption (e.g., via the gss_wrap and gss_unwrap functions). No, SASL supports both integrity and privacy. -- Luke -- Luke Howard | PADL Software Pty Ltd | www.padl.com