When people say "HTTP password," they usually mean:
: The simplest form where credentials are concatenated into a string (e.g., username:password ) and encoded in Base64 . Because Base64 is easily decoded, this method is highly insecure unless used over an encrypted HTTPS connection. http password