Note, however, that the above does not prevent someone who controls a non-authenticated URL from stealing passwords from authenticated URLs on the same server.
Netscape et Internet Explorer effaceront le cache d'authentification client s 'ils recoivent une réponse 401.