>>>>> "Tom" == Tom Yu via RT writes: Tom> If we change client code to additionally smash the local Tom> subkey if it receives a subkey from the server, then the Tom> semantic of "server subkey wins" will be accomplished. This Tom> change to the client code won't break against servers with Tom> the old behavior of merely sending back in the AP-REP the Tom> client subkey as received in the AP-REQ. I think this is probably wrong to do though. I think this discussion is best handled in person than through the bug system.