One thing I forgot about when I posted on this subject before, is that the National Archives has issued the "General Disposal Authority for Encrypted Records Created in Online Security Processes". It deals specifically with the management of records signed with PKI and other methods (in the Australian Commonwealth Government). It is available at http://www.naa.gov.au/recordkeeping/disposal/authorities/gda/PDF/GDA_encrypt ed_records.pdf (watch for url breaks). John Lovejoy [log in to unmask] List archives at http://lists.ufl.edu/archives/recmgmt-l.html Contact [log in to unmask] for assistance