They don't. 3M owns the source, but if not encrypted, it doesn't pass their security audit. So, they're the ones saying we need to encrypt it when it's created.


>Craig,
>
>Where do they have the unencrypted source to verify what the SP is doing? But maybe it's not to big an issue since they don't seem to be all that well encrypted.
>
>>It does happen because it did with one of our customers. Unencrypted SPs will not pass their security audit.