Convenient doesn't mean good though. I think it _can_ be used over TLS, but
since HTTP needs to support other schemes for non-TLS I can't see the point.
I don't think it would accepted if it was introduced today.
Pete Cordell
Codalogic Ltd
Interface XML to C++ the easy way using C++ XML
data binding to convert XSD schemas to C++ classes.
Visit http://codalogic.com/lmx/ or http://www.xml2cpp.com
for more info
----- Original Message -----
From: "Petite Abeille" <>
To: "xml-dev" <>
Sent: Sunday, January 29, 2012 8:33 PM
Subject: Re: [xml-dev] RE: Encoding charset of HTTP Basic Authentication
On Jan 29, 2012, at 9:17 PM, Pete Cordell wrote:
> My understanding is that Basic is essentially considered insecure
Basic is convenient, universally supported, and meant to be used over TLS
if you care about this kind of things.
_______________________________________________________________________
XML-DEV is a publicly archived, unmoderated list hosted by OASIS
to support XML implementation and development. To minimize
spam in the archives, you must subscribe before posting.
[Un]Subscribe/change address: http://www.oasis-open.org/mlmanage/
Or unsubscribe:
subscribe:
List archive: http://lists.xml.org/archives/xml-dev/
List Guidelines: http://www.oasis-open.org/maillists/guidelines.php
