There is a bug in new FF regarding kerberos auth. May be, that matters: https://bugzilla.mozilla.org/show_bug.cgi?id=857291 Regarding: http://wiki.squid-cache.org/action/show/Features/Authentication#Can_I_use_different_authentication_mechanisms_together.3F It states: >Due to a bug in common User-Agents (most notably Microsoft Internet Explorer) the order the auth-schemes are configured is relevant. RFC 2617, chapter 4.6, states: A user agent MUST choose to use the strongest auth-scheme it understands. Microsoft Internet Explorer instead chooses the first authe-scheme (in the order they are offered) it understands < However, AFAIK, this NOT correct (any more) regarding Internet Explorer. Starter of this thread confirmes this. Pls, update. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Order-of-authentication-schemes-in-Proxy-Authenticate-tp4659436p4659501.html Sent from the Squid - Users mailing list archive at Nabble.com.