On Sep 18, 2015, at 9:55 AM, Nick Lowe <nick.lowe at gmail.com> wrote: > Sorry, should clarify that it would only be the outer identity that > can be spoofed so this isn't an issue. Just thought it through > properly. Exactly. Alan DeKok.