Asking here since we don't have a security related mailing list for obvious reasons :-) Does anybody know: Is it insecure to write https://user:pw@website.tld in the browser? Comments and pointers welcome. -- Certified TYPO3 Integrator | TYPO3 Documentation Team Member http://mbless.de