FYI. Just ran across the IPR statement from RSA Security to the WSS group at OASIS(http://lists.oasis-open.org/archives/wss/200309/msg00066.html). Am pulling back sources from axis' CVS to ensure that we don't step on anyone's toes. code is now at sf.net (http://sf.net/projects/wss4j/). Am being paranoid, let's stop using Apache resources and work offline till we WSS4J get official status at Apache and we get an official ok from RSA. Send me a private email if you need access to the sf.net cvs for wss4j.
thanks, dims ===== Davanum Srinivas - http://webservices.apache.org/~dims/