>Regarding this Security Lab to Certify Banking Applications: I think it'll >last until the seed capital runs out unless they establish a consortium of ?insurance companies and tie their evaluations to the availability of >liability insurance. They don't need to go outside their own organization. They're banks. Making money from risk management is what they do. /r$, channeling for Dan Geer :)