Using HTTP Basic Auth in 2022
HTTP Basic Auth could be so much better with a little help from browsers. If it was a bit better, most websites wouldn't need to implement login pages over and over again. Plus it would be more secure since the popup is in its own security context.<p>* Add a button to log out. Logout never really worked across browsers with basic auth.<p>* Allow to inject a logo or a tiny bit of customization for branding. The default popup looks too ugly.<p>* Improve the Digest auth to modern crypto standards. Stop passing plain passwords over the wire.<p>That's it. It's not a massive amount of work and it could enable to simplify a lot of the Internet.