Sending the password more or less in plain text is defined by the http standard. It's not a bug per see... And I doubt you can convince any browser maker to dr

Sending the password more or less in plain text is defined by the http standard. It's not a bug per see... And I doubt you can convince any browser maker to drop basic auth support.