A system comprising: at least one client in a first domain; circuitry to establish, at least in part, at least one secure communication channel between the at least one client and at least one server in a second domain, wherein the first domain is distinct, at least in part, from the second domain, the at least one channel including at least one first domain session in the first domain and at least one second domain session in the second domain, the circuitry to generate, at least in part, at least one first domain session key and at least one second domain session key, the at least one first domain session key and the at least one second domain session key to encrypt, at least in part, respectively, the at least one first domain session and the at least one second domain session, the at least one client is adapted to transmit one or more packets via the at least one first domain session, the one or more data packets containing at least one first data set that comprises one or more first values that identify, at least in part, the at least one first domain session; the circuitry is adapted to generate the at least one first domain session key based at least in part upon a first domain key assigned to the first domain and the at least one first data set, and to generate the at least one second domain session key based at least in part upon a second domain key assigned to the second domain and at least one second data set that comprises one or more second values that identify, at least in part, the at least one second domain session and are obtainable, at least in part, from one or more packets communicated via the at least one second domain session, wherein the first domain key that is assigned to the first domain is different, at least in part, from the second domain key. at least one client in a first domain; circuitry to establish, at least in part, at least one secure communication channel between the at least one client and at least one server in a second domain, wherein the first domain is distinct, at least in part, from the second domain, the at least one channel including at least one first domain session in the first domain and at least one second domain session in the second domain, the circuitry to generate, at least in part, at least one first domain session key and at least one second domain session key, the at least one first domain session key and the at least one second domain session key to encrypt, at least in part, respectively, the at least one first domain session and the at least one second domain session, the at least one client is adapted to transmit one or more packets via the at least one first domain session, the one or more data packets containing at least one first data set that comprises one or more first values that identify, at least in part, the at least one first domain session; the circuitry is adapted to generate the at least one first domain session key based at least in part upon a first domain key assigned to the first domain and the at least one first data set, and to generate the at least one second domain session key based at least in part upon a second domain key assigned to the second domain and at least one second data set that comprises one or more second values that identify, at least in part, the at least one second domain session and are obtainable, at least in part, from one or more packets communicated via the at least one second domain session, wherein the first domain key that is assigned to the first domain is different, at least in part, from the second domain key.