3 ms·
HTTP Authentication is sessionless. In any scenario where you want to protect something without establishing and maintaining a session, it's useful. The only l
by mike-cardwell 16y ago
HTTP Authentication is sessionless. In any scenario where you want to protect something without establishing and maintaining a session, it's useful.
The only large public website that I know of which still uses HTTP Authentication though is http://www.123-reg.co.uk/ http://www.123-reg.co.uk/
- tptacek 16y agoWhat's the browser app scenario in which having a session is a liability, but having a stored HTTP Auth credential isn't?
- kls 16y agoActually the elimination of server side session reduces distributed application topology significantly. It is far easier to scale a stateless app than it is a statefull app.