passwords to CGI

[Paul Rubin]

Erik Max Francis <max at alcyone.com> writes:
> > You can't count on the remote host staying the same between http hits,
> > even from the same client, because some proxy servers can switch IP
> > addresses out from under you beteen hits.  That happens with AOL
> > users, for example.
> 
> In my experience this hasn't really been a problem.  Maybe you'll have
> different experience.

Hotmail used to (and maybe still does) use IP addresses to
authenticate sessions.  Users checking mail through corporate
firewalls that switched IP addresses during sessions had trouble as a
result.