Ok, I'm trying to understand the requirement here. Currently if there is no security configuration on the destination the default security will get used. If instead, there is no security conf on the destination and we drop security altogether, then what do we use the default security for? Does it have any purpose. (BTW I thought JBoss MQ also fell back to default security if no security was specified - obviously not?) If you want no security can't you just specify the default security as no security and not specify any security on the dest? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4111141#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...