HTTPS and BASIC authentication

后端 未结 4 1121
悲&欢浪女
悲&欢浪女 2020-12-15 05:51

When I use HTTP BASIC authentication along with HTTPS, are the username and password securely passed to the server?

I would be happy if you can help me with some ref

4条回答
  •  南方客
    南方客 (楼主)
    2020-12-15 06:18

    If a tool like Fiddler is installed on your local system, it could be used to forward your https transmissions decrypted to a third party. If someone sets it up to do this, they already own your system (either have physical access or full/root access).

提交回复
热议问题