"Despite its simplicity, you should never ever use basic authentication over HTTP! Basic authentication should only be considered over HTTPS." Small correction

"Despite its simplicity, you should never ever use basic authentication over HTTP! Basic authentication should only be considered over HTTPS." Small correction: You should NEVER EVER use ANY authentication mechanism over HTTP. Basic authentication has its uses, and for those use cases it works fine using HTTPS