https basic auth, I assume you mean. For http basic auth, you may as well just "secure" the resource by hosting it at http://my-username-and-password.example.c

https basic auth, I assume you mean. For http basic auth, you may as well just "secure" the resource by hosting it at http://my-username-and-password.example.com http://my-username-and-password.example.com or http://example.com/username/password/resource http://example.com/username/password/resource