diff --git a/ChangeLog b/ChangeLog
index 57be56a32f..d27502d090 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,7 @@
+Sat Feb 12 14:10:24 2005  Tanaka Akira  <akr@m17n.org>
+
+	* lib/open-uri.rb (OpenURI.open_http): reject userinfo explicitly.
+	
 Sat Feb 12 13:54:03 2005  Tanaka Akira  <akr@m17n.org>
 
 	* lib/open-uri.rb: support https if the platform provides CA
diff --git a/lib/open-uri.rb b/lib/open-uri.rb
index f29be17a46..344edc5e81 100644
--- a/lib/open-uri.rb
+++ b/lib/open-uri.rb
@@ -200,6 +200,10 @@ module OpenURI
       raise "Non-HTTP proxy URI: #{proxy}" if proxy.class != URI::HTTP
     end
 
+    if target.userinfo
+      raise "userinfo not supported.  [RFC3986]"
+    end
+
     require 'net/http'
     klass = Net::HTTP
     if URI::HTTP === target