place to report "bugs", it was not every specific True enough :). I added an item for tlsecurity on the tug.org/texlive/bugs.html page. Anyway, as for the actual problem, John is working on it. I'll let you know when he has a patch. --thanks, karl.