[mindcrash]

"Despite its simplicity, you should never ever use basic authentication over HTTP! Basic authentication should only be considered over HTTPS."

Small correction: You should NEVER EVER use ANY authentication mechanism over HTTP. Basic authentication has its uses, and for those use cases it works fine using HTTPS