Brad Fitzpatrick wrote: > What is "request initiation"? The time at which the client first sent the check_authentication request. There's one rule for all the timespan stuff: "always err on the conservative side". -- __ \/ o\ Paul Crowley, paul at ciphergoth.org /\__/ http://www.ciphergoth.org/