News for hackers. Stuff that matters.
Re:Using HTTP Basic Auth in 2022 by alerighi on Saturday January 01, 2022 @06:21PM (#29763928)
Agree with everything beside the third point.

The argument of passing plain password over the wire doesn't make sense: every login form when you submit it passes username and password over the wire! Nobody encrypts the passwords client side.

There are no comments on this comment yet.