https://brunopedro.com/tags/basic-auth/Recent content in Basic Auth on Bruno PedroHugoen-usTue, 08 May 2018 10:00:15 -0700https://brunopedro.com/2013/04/18/still-using-http-basic-auth/Thu, 18 Apr 2013 15:22:17 +0000https://brunopedro.com/2013/04/18/still-using-http-basic-auth/<p>Great article by <a href="http://swaggadocio.com/" title="Steve Graham">Steve Graham</a> about why you should <strong>stop using <a href="http://en.wikipedia.org/wiki/Hypertext_Transfer_Protocol" title="Hypertext Transfer Protocol">HTTP</a> Basic Auth</strong> immediately!</p> <blockquote> <p>As well as being tremendously simple, HTTP Basic by itself is also tremendously insecure, i.e. it is implemented by simply <a href="http://en.wikipedia.org/wiki/Base64" title="Base64">Base64</a> encoding the username and password concatenated with a colon &ldquo;:&rdquo; character. It then follows that HTTP Basic should only be used, if at all, over securely encrypted connections.</p> </blockquote> <p>Original article: <a href="http://swaggadocio.com/post/48223179207/why-the-hell-does-your-api-still-use-http-basic-auth" title="WHY THE HELL DOES YOUR API STILL USE HTTP BASIC AUTH?">WHY THE HELL DOES YOUR API STILL USE HTTP BASIC AUTH?</a></p>