>Don't forget that some RPs (like mine) don't want the email address >or full name of the user. And that other RP's won't have SSL, so they *really* won't want that data flying across the channel for malicious parties to pick up. -Shade