Jeff, We already have a working alternative to logging in with cookies: HTTP digest authentication. The problem is that (1) the browser vendors do not provide a method to log out, and (2) they present a modal dialog box when authenticating rather than allowing the use of in-page forms. What is needed is a campaign similar to the campaign for web standards to get the browser vendors to add the ability to forget HTTP authentication credentials and allow in-page forms that can be styled for submitting HTTP authentication. Jason