Hi Lisa

Thank you for dropping in.

Possibly I was unclear. We're not looking for http-based authenticated resources. The resources we are trying to reach are public www xml resources. The user is requested by the xmlhttp component to type "user/password".

I'm a bit lost here. Is this "user/password" combo a classical http challenge/response mechanism or is it a local windows-security item that gets in the way.

On some of our users' configurations the http call will succeed, in others not.

Should request the user to deliver their "user/password" and relay them with something like:

httpOb.open('POST' or 'GET',cURL, bAsync,cUser,cPassword).

I'm left wondering at this stage whether this great technology (XMLHTTP) is currently usable on fat-clients ? On home PCs for sure. On corporate ones...

François