Basic authentication i understand uses base64 encoding, but does form based authentication uses base64 encoding too ?
I believe form based authentication transmits username/pwd as plain text.
Thanks again Yogesh
posted 10 years ago
Yes, form-based auth is in clear text, because to the browser it's just a regular form submission - it has no idea that it's user credentials. Of course, a base64-encoded password is only marginally harder to recover than a plain text one.