• From: "Pete Cordell" <petexmldev@c...>
• To: "Petite Abeille" <petite.abeille@g...>,"xml-dev" <xml-dev@l...>
• Date: Sun, 29 Jan 2012 21:35:17 -0000

Convenient doesn't mean good though.  I think it _can_ be used over TLS, but 
since HTTP needs to support other schemes for non-TLS I can't see the point. 
I don't think it would accepted if it was introduced today.

Pete Cordell
Codalogic Ltd
Interface XML to C++ the easy way using C++ XML
data binding to convert XSD schemas to C++ classes.
Visit http://codalogic.com/lmx/ or http://www.xml2cpp.com
for more info
----- Original Message ----- 
From: "Petite Abeille" <petite.abeille@g...>
To: "xml-dev" <xml-dev@l...>
Sent: Sunday, January 29, 2012 8:33 PM
Subject: Re:  RE: Encoding charset of HTTP Basic Authentication



On Jan 29, 2012, at 9:17 PM, Pete Cordell wrote:

> My understanding is that Basic is essentially considered insecure

Basic is convenient, universally  supported, and meant to be used over TLS 
if you care about this kind of things.

_______________________________________________________________________

XML-DEV is a publicly archived, unmoderated list hosted by OASIS
to support XML implementation and development. To minimize
spam in the archives, you must subscribe before posting.

[Un]Subscribe/change address: http://www.oasis-open.org/mlmanage/
Or unsubscribe: xml-dev-unsubscribe@l...
subscribe: xml-dev-subscribe@l...
List archive: http://lists.xml.org/archives/xml-dev/
List Guidelines: http://www.oasis-open.org/maillists/guidelines.php

• Follow-Ups:
  • Re: RE: Encoding charset of HTTP Basic Authentication
    • From: "Pete Cordell" <petexmldev@c...>

• References:
  • RE: Encoding charset of HTTP Basic Authentication
    • From: "David Lee" <dlee@c...>
  • Re: RE: Encoding charset of HTTP Basic Authentication
    • From: "Pete Cordell" <petexmldev@c...>
  • Re: RE: Encoding charset of HTTP Basic Authentication
    • From: Petite Abeille <petite.abeille@g...>