[macinjosh]

If a good password is used HTTP basic auth is plenty secure over HTTPS so that everything is encrypted.