IE Security Update - http://support.microsoft.com/?id=834489
On 3/2/04 - Microsoft released the IE patch...
http://www.microsoft.com/technet/security/Bulletin/MS04-004.asp
Many complaint that it violate the RFC spec.... I think the RFC is not clear, here's some expert's view -
Micheal Howard -
http://blogs.msdn.com/michael_howard/archive/2004/02/04/67622.aspx
Jerry Bryant -
http://msmvps.com/secure/posts/2259.aspx