Re:API Design Guide
by johnjuuljensen on Wednesday February 22, 2017 @02:21PM
(#13708358)
Basic auth is great. It lowers the barrier of entry, to anyone with a browser.
Not all users of APIs are developers.
[ Parent
| on HN ]
https basic auth, I assume you mean.
For http basic auth, you may as well just "secure" the resource by hosting it at http://my-username-and-password.example.com or http://example.com/username/password/resource
Re:API Design Guide
by johnjuuljensen on Wednesday February 22, 2017 @03:49PM
(#13709010)
I thought https was implied these days :)
Yes absolutely https.