News for hackers. Stuff that matters.

A comment on Living without the modern browser. Parent comment

Re:Living without the modern browser by megous on Wednesday July 10, 2019 @09:35AM (#20401778)
> Does even anybody remember the good old HTTP basic acess authentification? This is one of the most accessible ways of protecting ressources, it can be consumed by any HTTP client (!), and it is just reduced to the basic.

Yes! I recently used an e-shop that uses HTTP auth for user accounts. It was a bit unsettling, when the browser asked me for login credentials. :)

[ Parent | on HN ]
Re:Living without the modern browser by heavenlyblue on Wednesday July 10, 2019 @10:22AM (#20402194)
It's also quite disappointing that I can't use my 1Password vault when a website asks for my HTTP password via a standard dialog in Firefox.

PS: I am using Ubuntu so I can't use 1Password as a standalone application; but how does it happen that a website is perfectly capable of blocking my interaction with the browser? Why doesn't Firefox ask for the password as part of the actual webpage instead?

Hadn't tried it in other browsers - does it work at all?

[ Parent | on HN ]
Re:Living without the modern browser by dylz on Wednesday July 10, 2019 @10:53AM (#20402514)
In this case, the u/p needs to be sent along with the request - which means it needs to be asked for by the browser before the request to the site is ever sent..
[ Parent | on HN ]
Re:Living without the modern browser by heavenlyblue on Wednesday July 10, 2019 @11:48AM (#20403082)
No, I mean just show a customised page for 403 that also has a username/password that you could put in and log in.

The cross-browser modal dialog is entirely anti-Ux.

[ Parent | on HN ]
Re:Living without the modern browser by silverwind on Wednesday July 10, 2019 @01:04PM (#20403921)
Bitwarden is able to auto-fill basic auth dialogs in Firefox, but only if there is only a single entry for the page in store. Thought, sometimes it sometimes does not work.

I do wish Mozilla would finally do away with the modal auth dialog and use in-tab content that extensions can interact with.

[ Parent | on HN ]
Re:Living without the modern browser by smartmic on Wednesday July 10, 2019 @11:55AM (#20403171)
I just set up my own Git central using HTTP basic auth (with cgit and Gitolite). It is refreshingly simple and also looks good in text-based browsers.

https://github.com/h2o/h2o/wiki/Hosting-private-and-public-r...

[ Parent | on HN ]
Re:Living without the modern browser by megous on Wednesday July 10, 2019 @03:52PM (#20405825)
Yup, I also use basic auth for in-development websites for my customers. It's just a few lines in nginx, and very flexible. The website doesn't even need to know.
[ Parent | on HN ]