>but, at the risk of looking academic, what is the point of basing the interop communication on a protocol that is going to be contaminated?

contaminated? In wich way? I don't see your point.

Michael have show a way to have the auth withouth a stateless, and if SOAP3 allows to this in a better way, this is welcome.