On Mon, 4 Apr 2005, Greg Scott wrote:
I would really like to understand why we need both sections and in this order...
You need both sections to support all browsers. Not all browsers supports NTLM.
You need them in specific order (ntlm first) because MSIE is broken and always selects the first advertised authentication scheme even if the standards clearly says it should select the strongest authentication scheme.
Regards Henrik
