All web sites "download". They have to. What you are referring to is caching. Turning on or off caching would have no effect on security. Bad guys can always make websites that use the true gifs, etc from the real websites. They can get those images,etc from the real site or from your local cache. Or they can copy them to a fake site. In fact, it is better for their performance to have you download them from the real site. --Dean On Mon, 22 Dec 2003, Tom Petch wrote: > Banks do make it extraordinarily easy for their sites to be spoofed by > allowing all their html, .gif etc to appear in my Temporary Internet Folder > without even me having to lift a finger. > > You can make web sites which don't download - time for banks to learn about > this. > > Tom Petch, Consultant