title: Basic Auth for subdomain without https or shall I buy a second ssl certificate for subdomain?
body: <p>I have small website project on a managed hosting server where https is used. </p>
  
  <p>Now I would like to know if it is still secure to use a http subdomain (without  https) in combination with a basic auth restriction defined in .htaccess. I have only one security certificate that is used for the main website. Shell I buy a second security certificate for the subdomain? </p>