Ok... as I continue to 'abuse' this list I started thinking about something. If we choose to authenticate against LDAP, I know that we can use SSL/TLS and secure the traffic between our LDAP servers and the Squid servers. However, wouldn't the usernames/passwords still be sent basically clear-text from the Squid Client (workstations) and Squid? If this is the case, is there any way to secure the authentication between squid clients and squid. What are my options? Thanks again!