Hi, > It's more compatible than your string and prioritises PFS and GCM actually ;) I'll have to work on PFS prioritisation 8-) > Your string nukes legacy clients that don't have AES support, like the > supplicant in Windows XP. exactly! ;-) alan