Basic access authentication: Difference between revisions

Revision as of 19:47, 6 December 2005

Revision as of 18:00, 8 March 2006

Line 5:

One advantage of the basic authentication scheme is that it is supported by almost all popular web browsers. It is rarely used on normal [[Internet]] [[Website|web sites]] but is suitable for small, private systems. A later mechanism, [[digest access authentication]], was developed in order to replace the basic authentication scheme and enable credentials to be passed in a relatively secure manner over an otherwise insecure channel.

The basic authentication scheme was originally defined by RFC 1945 (''Hypertext Transfer Protocol – HTTP/1.0'') although further information regarding security issues may be found in RFC 20682616 (''Hypertext Transfer Protocol – HTTP/1.1'') and RFC 2617 (''HTTP Authentication: Basic and Digest Access Authentication'').

== Example ==