All, The NSA has just unclassified a 300 pages document about .NET 2.0 security http://www.nsa.gov/snac/app/I731-008R-2006.pdf I think it can be interesting resource, --Romain Romain Gaucher Security Consultant Cigital, http://www.cigital.com Software Confidence. Achieved.