Peter,
Thanks for your prompt reply. I do remember that in the (far) past it worked like it is working now.
Conclusion: it did not work like this in the last year or so (before 18.0.59) .
I've been busy adjusting to the current situation and this ticket can be closed as far as i'm concerned.
Something (major) has changed regarding password protected directories.
I got a complaint from a user that she could not login anymore today on a certain subdirectory, but last week she could.
After an extensive search it turns out that one can now only logon at subdirectory level (eg...
I also noticed that this remark (security can be improved) showed up for most domains lately. Configuration is all the same.
I reissued the certificate for one of the domains and that shows now 'safe and sound!'.
So i expect when the certificates are renewed automaticaly the next time all will...