3 ms·
Isn't this pretty similar to basic auth? Passing credentials in plaintext but over TLS.
by grepthisab 7y ago
Isn't this pretty similar to basic auth? Passing credentials in plaintext but over TLS.
- jomendoz 7y agoYes. But URLs tent to be logged more than HTTP headers or payloads. Any L7 proxy can spit out requested paths and the password will be preserved in different places for long periods of time.
- grepthisab 7y agoAh, that makes sense. Thanks!