Obviously that would work, but not if you're using Challenge-response authentication. In general, I don't think people bother with now that when using https.