5 ms·
HTTP Basic authentication should never be used, it is very vulnerable to traffic analysis attacks. HTTP Digest authentication however, would be a perfectly fine
by comradesmith 9y ago
HTTP Basic authentication should never be used, it is very vulnerable to traffic analysis attacks. HTTP Digest authentication however, would be a perfectly fine solution.
- dozzie 9y agoHow so? Over SSL? (Note that you should never call anything requiring authentication/authorization over plain HTTP.)
- comradesmith 9y agoA quick Google suggests you're right, as in either case you must run SSL/TLS. Appypolylogies.
- deleted 9y ago[deleted]