Form-based HTTP Authentication Proof of Concept

Hello, As a follow up to my paper advocating HTTP authentication over cookies [1], I've built a simple sample application which demonstrates how a combination of XMLHttpRequest and response code tricks can be used to achieve form-based login, logout, and authenticated password changes in the four

Unencoded URL in Address Bar

What is the reason behind having Firefox show the URL unencoded in the address bar? For example: http://www.corry.biz/a%20url%20with%20spaces Shows up as: http://www.corry.biz/a url with spaces The reason I ask is if you follow this link using FF 3.6 on OS X: http://i