Macintouch has posted

a bit more on the security thing I referred to yesterday in a MacInTouch Reader Report on MSIE and Persistent Connections. It seems plausible enough to me.