Basic access authentication: Difference between revisions

Revision as of 11:01, 27 November 2004

Revision as of 11:18, 27 November 2004

Line 1:

In the context of a [[HTTP]] transaction, the '''basic authentication scheme''' is a method designed to allow a [[web browser]], or other client program, to provide credentials – in the form of a user name and [[password]] – when making a request.

Although the scheme is easily implemented, it relies on the assumption that the connection between the client and server computers is secure and can be trusted. Specifically, the credentials are passed as plain text and could easily be intercepted. To prevent the user name and password being read directly, they are encoded as a sequence of [[Base64|base-64]] characters before transmission.