Standards?

We're Microsoft. We don't have to obey fucking STANDARDS.

In which Microsoft unilaterally remove support for

<protocol>://<user>:<password>@<site>/

URLs from IE with the latest security patch. See http://support.microsoft.com/default.aspx?scid=kb;en-us;Q834489 and weep.

(Yes, there's a registry hack to get round it. And yes, I know *why* they're doing it. )