Hi I know that one is supposed to use a plain httpd or possibly thttpd for delivering static content like images. That is however a problem if the images itself are subject to protection. One option is basic atuhentication, but than the user/password goes to the server for every image to GET. Using https would mean protection of the user/password but then the images get encrypted as well, where I only want some access protection and no plaintext passwords going to the server. Using autcookie, would involve the use of mod_perl again. I am a bit stuck here. Arnold