> It’s simple, but insecure unless wrapped in HTTPS. That’s why it’s almost never used in production anymore. I mean, if you’re going to write a post about aut

> It’s simple, but insecure unless wrapped in HTTPS. That’s why it’s almost never used in production anymore. I mean, if you’re going to write a post about auth methods, you gotta say more than this.