Latest IE patch breaking non username:password at encoded websites?

Tue Feb 3 17:28:43 UTC 2004

Yes. From MS:  (a registry-based fix is detailed in the KB article)

This Internet Explorer cumulative update also includes a change to the
functionality of a Basic Authentication feature in Internet Explorer.
The update removes support for handling user names and passwords in HTTP
and HTTP with Secure Sockets Layer (SSL) or HTTPS URLs in Microsoft
Internet Explorer. The following URL syntax is no longer supported in
Internet Explorer or Windows Explorer after you install this software
update:

http(s)://username:password at server/resource.ext

For more information about this change, please see Microsoft Knowledge
Base article 834489.

Bob German
Director, Operations & Engineering
Irides, LLC

-----Original Message-----
From: owner-nanog at merit.edu [mailto:owner-nanog at merit.edu] On Behalf Of
Herman Harless
Sent: Tuesday, February 03, 2004 12:27 PM
To: nanog
Subject: Latest IE patch breaking non username:password at encoded
websites?

We're starting to take complaints from folks who have installed the
latest IE patch about various broken website functionality.  The
complaints are not related to folks trying to use the username:password@
functionality that was removed by the patch.

Is anyone taking similar calls / seeing similar issues? 

Herman Harless
Director, Advanced Data Network Engineering and Operations NTELOS, Inc.
herman at ntelos.net