The reason was that scammers would send people a URL like:
http://www.visa.com:[email protected]/
and fucking nimrods would see "www.visa.com" and enter
their credit card info. I can see why MS wants to cater to
nimrods, but I wish they'd allowed non-nimrods to enable
user:pw@ as an option.