Content deleted Content added
m Added charset to example server error |
Added link to "digest access authentication" |
||
Line 1:
In the context of a [[HTTP]] transaction, the '''basic authentication scheme''' is a method designed to allow a [[web browser]], or other client program, to provide credentials – in the form of a user name and [[password]] – when making a request.
Although the scheme is easily implemented, it relies on the assumption that the connection between the client and server computers is secure and can be trusted. Specifically, the credentials are passed as plain text and could be intercepted easily. The scheme also provides no protection for the information passed back from the server. To prevent the user name and password being read directly, they are encoded as a sequence of [[Base64|base-64]] characters before transmission. A new authentication scheme was developed in order to replace basic authentication scheme. It's called [[digest access authentication]] and enables secure credential passing over an unsecure channel.
One advantage of the basic authentication scheme is that it is supported by most clients. It is rarely used on normal [[Internet]] [[Website|web sites]] but is suitable for small, private systems.
Line 69:
(followed by a blank line and HTML text comprising of the restricted page).
=== See Also ===
* [[Digest access authentication]].
| |||