First - HTTrack is great!

Next, a quick suggestion: 

When a URL containing with basic authentication (ie 
<http://username:password@site>) is used, the whole URL 
including the username:password appears in external URL 
references in HTTrack generated HTML code.

This can be a problem when you are trying to distribute 
a mirror of a protected site - you can reveal your 
username:password! (Arguably a security issue?)

Can you add a setting to remote basic authentication 
from URLs inserted into HTTrack generated HTML code?
Thanks,
David