Although I'm not really sympathetic to the OSI model, it did get some things right. For instance, witness how almost every TCP/IP protocol has to roll out its own session layer for authentication purposes...