They clearly haven't demonstrated their belief by buying into it in any economic sense. But I also think that buyers believe that a simpler strategy, which is to say private line or virtual circuit networking, is the way they want to go. What we've got here is a very complicated process and the buyer feels not so much that he is concerned as that he should be. As you pointed out, correctly, maybe the problem is that PKI really isn't an easy solution to the security problem and for that reason it doesn't meet the buyer requirements. The strange thing is that the only encrypted and signed e-mails I've ever received were not strategic.
Strategic information comes in the clear.
So what we're finding is that there's a certain group of people who are tied closely to this technology and are using it for everything. And there are other people who perhaps need to use it and are put off by it so they don't use it for anything. Someone mentioned certificate authorities. I see no reason in the world why I should put my trust in Joe's Certificate Authority to verify and validate some other user that I've never seen before because I don't know Joe either. These things are going to have to be centralized, they're going to have to be done at a much lower level in the application or in the network than they are now.