News for hackers. Stuff that matters.

A comment on Using HTTP Basic Auth in 2022. Parent comment

Re:Using HTTP Basic Auth in 2022 by w3ll_w3ll_w3ll on Saturday January 01, 2022 @04:31PM (#29763042)
Also, using TLS with Perfect Forward Secrecy (all modern ciphers), it's not possible to just capture the traffic and dectypt it later. You have to know the private key and do MITM.
[ Parent | on HN ]
Re:Using HTTP Basic Auth in 2022 by rixed on Saturday January 01, 2022 @11:10PM (#29765740)
> You have to know the private key and do MITM.

Which can safely be assumed to happen whenever the equipment is provided by another party such as an employer. All in the name of security, just not that of the user.

[ Parent | on HN ]