4 ms·

> It's still a security risk. MITM happens regularly. Then it's more or less as broken as alternative authentication methods

• groby_b 7y ago
  Nope. Because other methods never transmit a password in cleartext. (And they especially don't transmit it with every single request)
  • c22 7y ago
    How do they manage this feat over unencrypted stateless http? Surely they must transmit something with every request?