For both question you schould study the related RFC for the HTTP-protocol.
In case of Credentials they evaluate the Authenticate header in the
HTTP-protocol.
With proxies I'm no so familar with.
Regards from Berlin
Holger Boskugel
--
http://www.vbwebprofi.de