Http basic authentication urls are never secure (that requires https) and are no... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

tinus_hn on Aug 7, 2021 | parent | context | favorite | on: Bug in Lynx's SSL certificate validation – leaks p...

Http basic authentication urls are never secure (that requires https) and are not supported in links by browsers these days.

akerl_ on Aug 7, 2021 [–]

This bug only affects HTTPS basic auth, given that the issue is with SNI (and, of course, that basic auth over HTTP doesn’t have any encryption to leak around).

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact