3 ms·
The main criticism relates to eavesdropping. Wrapping Basic or Digest authentication in TLS eliminates that issue.
by EvanAnderson 12y ago
The main criticism relates to eavesdropping. Wrapping Basic or Digest authentication in TLS eliminates that issue.
- xorbyte 12y agoThe article makes no mention of TLS anywhere, and the example endpoints are all HTTP. So, this is a thoroughly insecure implementation, relying on very weak security mechanisms, prone to straightforward interception and tampering, replay etc.