The following text appears in the Ross Anderson paper I just forwarded the link to: "A security-economics example is the thicket of conflicting patent claims on authentication protocols, one of the two main reasons we’ve been unable to improve browser security and deal with phishing...." What patents is he referring to? -- Jerry