i may understand one place you could get confused. unlike a root CA which publishes a TAL which describes transports, a non-root CA does not publish a TAL describing what transports it supports. of course, rsync is mandatory to provide; but anything else is "if it works, enjoy it. otherwise use rsync." randy