3 ms·
Http basic authentication urls are never secure (that requires https) and are not supported in links by browsers these days.
by tinus_hn 5y ago
Http basic authentication urls are never secure (that requires https) and are not supported in links by browsers these days.
- akerl_ 5y agoThis bug only affects HTTPS basic auth, given that the issue is with SNI (and, of course, that basic auth over HTTP doesn’t have any encryption to leak around).