Abstract
- Username and password are sent in every HTTP Request for protected resources.
Authorization: Basic dXNlcm5hbWU6cGFzc3dvcmQ=in HTTP Headers - Must sent with TLS, or hackers can see the username and password in plaintext
Cons
- Inability to track user login status. Obsolete for modern websites