I notice that some "secure" sites are still in http when they ask for the username and password, and _then_ they go to https. Is the username and password encrypted before going to the https site? Or should these web sites go to the https site, first, and then ask for the username and password? --Chet - To unsubscribe, send email to majordomo@silug.org with "unsubscribe silug-discuss" in the body.