Form and Basic Authentication

[Yogesh Hingmire]

Basic authentication i understand uses base64 encoding, but does form based authentication uses base64 encoding too ?

I believe form based authentication transmits username/pwd as plain text.

Thanks again
Yogesh

[Ulf Dittmer]

Yes, form-based auth is in clear text, because to the browser it's just a regular form submission - it has no idea that it's user credentials. Of course, a base64-encoded password is only marginally harder to recover than a plain text one.