I third the motion to leave the "simple" Digest authentication scheme alone, and solve the be-all-end-all problem somewhere else. -- Bob