When I use HTTP BASIC authentication along with HTTPS, are the username and password securely passed to the server?
I would be happy if you can help me with some ref
Yes, they are passed securely... if a hacker can decrypt your https transaction he can for sure decrypt the base64 user:password...
I know the more rocks you put the harder it takes... but base64 is not for security reasons