News for hackers. Stuff that matters.
Re:API Design Guide by johnjuuljensen on Wednesday February 22, 2017 @02:21PM (#13708358)
Basic auth is great. It lowers the barrier of entry, to anyone with a browser. Not all users of APIs are developers.
Re:API Design Guide by fixermark on Wednesday February 22, 2017 @03:39PM (#13708949)
https basic auth, I assume you mean.

For http basic auth, you may as well just "secure" the resource by hosting it at http://my-username-and-password.example.com or http://example.com/username/password/resource

Re:API Design Guide by johnjuuljensen on Wednesday February 22, 2017 @03:49PM (#13709010)
I thought https was implied these days :)

Yes absolutely https.