3 ms·
The primary flaw isn't BASIC AUTH. It's the password itself. Brute force attacks are easy. The only good way of securing anything is through an Authenticator ap
by ChicagoDave 5y ago
The primary flaw isn't BASIC AUTH. It's the password itself. Brute force attacks are easy. The only good way of securing anything is through an Authenticator app.
- anaganisk 5y agoAnd all that takes to break it is a compromised version floating around in WhatsApp groups saying Authenticator plus would give u blue theme.
- lucb1e 5y agoYou can still have the server trigger an authentication confirmation when using basic auth. Web servers not coming with authentication apps is not a flaw, it is a completely separate component and scope.