Basic access authentication: Difference between revisions

Revision as of 20:22, 20 August 2023

Revision as of 20:23, 20 August 2023

Line 19:

</syntaxhighlight>

In modern browsers, cached credentials for basic authentication are typically cleared when clearing browsing history. Most browsers allow users to specifically clear only credentials, though the option may be hard to find, and typically clears credentials for all visited sites.<ref>{{Cite web|title=540516 - Usability: Allow users to clear HTTP Basic authentication details ('Logout')|url=https://bugzilla.mozilla.org/show_bug.cgi?id=540516|access-date=2020-08-06|website=bugzilla.mozilla.org|language=en|quote=Clear Recent History->Active Logins (in the details) is used to clear the authentication.}}</ref><ref>{{Cite web|title=Clear browsing data - ComComputer - Google Chrome Help|url=https://support.google.com/chrome/answer/2392709?co=GENIE.Platform=Desktop&hl=en|access-date=2020-08-06|website=support.google.com|quote=Data that can be deleted[...]Passwords: Records of passwords you saved are deleted.}}</ref>

Brute forcing credentials is not actively prevented or detected (unless a server-side mechanism is used).

== Protocol ==