4 ms·
With basic auth you give something more than that. You give the ACTUAL credentials, because they are base64 encoded and not hashed. It is trivial to decode them
by niksakl 6y ago
With basic auth you give something more than that. You give the ACTUAL credentials, because they are base64 encoded and not hashed. It is trivial to decode them and have the raw values.
To assume that a user trusts the subdomain because she trusts the domain, is something I find insane.
- viraptor 6y agoYou're right. I was thinking of digest auth which at least has nonces and hashing. Basic does not.