Alright, I realize this is possibly a silly question, and apologize in advance, *but*..... Our company issues it's own digicerts, and our site allows free access to anyone with one of those. We allow free access to anybody in a core "public" area, regardless. Currently I'm using an external redirect in the PerlPostReadRequestHandler if someone tries to hit a secured page on the nonsecure HTTP protocol. I'm not using front/back end servers; it's a reasonably small intranet site behind a firewall. Is that reasonable? Or would there be some vastly better way with mod_rewrite or something? Thanks, all. P. __________________________________________________ Do You Yahoo!? Yahoo! Photos - Share your holiday photos online! http://photos.yahoo.com/