News for hackers. Stuff that matters.

A comment on Using HTTP Basic Auth in 2022. Parent comment

Re:Using HTTP Basic Auth in 2022 by gjsman-1000 on Saturday January 01, 2022 @04:38PM (#29763113)
Right... that would be awesome. But it would still be susceptible to a hacker replacing it with a traditional login page with some logging... unless somehow you could prevent any traditional web pages from working.
[ Parent | on HN ]
Re:Using HTTP Basic Auth in 2022 by madacol on Saturday January 01, 2022 @05:51PM (#29763732)
And users WILL NOTICE before that happens

Please, stop using those strawman arguments

[ Parent | on HN ]
Re:Using HTTP Basic Auth in 2022 by gjsman-1000 on Saturday January 01, 2022 @05:59PM (#29763777)
I beg to differ. You'd be surprised how many users probably would not recognize any difference whatsoever as long as the hacker got things looking relatively identical.
[ Parent | on HN ]
Re:Using HTTP Basic Auth in 2022 by dllthomas on Saturday January 01, 2022 @06:13PM (#29763866)
Some users will notice. If we've succeeded to the point of "traditional login pages" being unusual and remarkable, many users will notice. Probably in any case some users will fail to notice.

In any case, though, it seems likely to reduce the impact of a compromise.

[ Parent | on HN ]