[comradesmith]

HTTP Basic authentication should never be used, it is very vulnerable to traffic analysis attacks. HTTP Digest authentication however, would be a perfectly fine solution.

[dozzie]

How so? Over SSL? (Note that you should never call anything requiring authentication/authorization over plain HTTP.)

[comradesmith]

A quick Google suggests you're right, as in either case you must run SSL/TLS.

Appypolylogies.