[67144] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

RE: Latest IE patch breaking non username:password@encoded websites?

daemon@ATHENA.MIT.EDU (Bob German)
Tue Feb 3 12:35:44 2004

From: "Bob German" <bobgerman@irides.com>
To: "'nanog'" <nanog@merit.edu>
Date: Tue, 3 Feb 2004 12:28:43 -0500
In-Reply-To: <1075829209.29062.44.camel@herman>
Errors-To: owner-nanog-outgoing@merit.edu



Yes. From MS:  (a registry-based fix is detailed in the KB article)

This Internet Explorer cumulative update also includes a change to the
functionality of a Basic Authentication feature in Internet Explorer.
The update removes support for handling user names and passwords in HTTP
and HTTP with Secure Sockets Layer (SSL) or HTTPS URLs in Microsoft
Internet Explorer. The following URL syntax is no longer supported in
Internet Explorer or Windows Explorer after you install this software
update:

http(s)://username:password@server/resource.ext

For more information about this change, please see Microsoft Knowledge
Base article 834489.

Bob German
Director, Operations & Engineering
Irides, LLC
 


-----Original Message-----
From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of
Herman Harless
Sent: Tuesday, February 03, 2004 12:27 PM
To: nanog
Subject: Latest IE patch breaking non username:password@encoded
websites?



We're starting to take complaints from folks who have installed the
latest IE patch about various broken website functionality.  The
complaints are not related to folks trying to use the username:password@
functionality that was removed by the patch.

Is anyone taking similar calls / seeing similar issues? 

Herman Harless
Director, Advanced Data Network Engineering and Operations NTELOS, Inc.
herman@ntelos.net





home help back first fref pref prev next nref lref last post