For encryption between Oracle's app. server and database you use Advanced Security Option and For encryption between a client browser and app. server you use SSL or does SSL also handle encryption between app. server and database. Finally, anyone have any ideas for the performance cost of SSL - the performance cost of ASO? Thanks, Paula