Skip to content

Commit 0026d1e

Browse files
docs: notate that basic auth is not inherently insecure
1 parent ed18245 commit 0026d1e

1 file changed

Lines changed: 5 additions & 0 deletions

File tree

docs/SECURING_API_ACCESS.md

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -41,6 +41,11 @@ over secure connections (e.g., HTTPS or VPN).
4141
- Credentials are sent with each request, increasing the risk of interception, especially if not using HTTPS.
4242
- Credentials may also allow web GUI and/or SSH access, which may not be desirable for API-only users.
4343

44+
!!! Note
45+
Basic authentication is not inherently insecure. In fact, with the proper user account management, strong passwords,
46+
and secure transport (HTTPS), basic authentication can be just as secure as key-based authentication methods.
47+
48+
4449
### JWT Authentication
4550

4651
[JWT authentication](AUTHENTICATION_AND_AUTHORIZATION.md#json-web-token-jwt-authentication) allows you to authenticate

0 commit comments

Comments
 (0)