Questions tagged [http-basic-auth]
HTTP basic auth is an authentication mechanism used for websites over the HTTP protocol. It is commonly recogniced by a browser password prompt.
-3
votes
0answers
46 views
Using Digest Authentication to fix TLS/PKI? Patents?
TLS/PKI guarantees that the domain name as normally displayed in the URL in a browser is the one that is being communicated with. Which is completely useless in practice because users do not actually ...
0
votes
1answer
53 views
Implementing generic login for Zap
I need to build an automated tool that will be able to login to any website supporting basic auth to perform an authenticated scan with OWASP Zap (credentials provided). Here is what I have in mind: ...
0
votes
0answers
35 views
REST API Basic Authentication Use Case
I'm developing REST APIs and would like to know if Basic Authentication will be enough to secure them, or if I should be looking into other authentication methods, like OAuth2. My APIs are setup to ...
2
votes
1answer
1k views
HTTP Basic Auth is enough?
I have WebSVN, Gitlab and phpMyAdmin hosted on my dev server. Now, all of it, I password protect the pages (not their individual login) using HTTP Basic Auth, is this the best practice that I can do?
299
votes
9answers
169k views
Is BASIC-Auth secure if done over HTTPS?
I'm making a REST-API and it's straight forward to do BASIC auth login. Then let HTTPS secure the connection so the password is protected when the api is used.
Can this be considered secure?
