Reality


Implementing Crypto is never done in first stage of new protocols.

DNSSEC / IPv6 IPSec is a long way off.

We'll always need 'hacks'.