Erik:

Yeah, Rick's HTTPcom gets its server name and method in client side script, so its a potential security risk just like RDS. But, if hide your connection information inside your COM object, your could be OK. Someone could see the call to your COM object if they VIEW|SOURCE, but it wouldn't do them any good.

Charlie