Isn't that sort of a feature? Customizable HTTP auth dialogs are a security liab... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		marginalia_nu on Feb 18, 2023 \| parent \| context \| favorite \| on: Password protect a static HTML page Isn't that sort of a feature? Customizable HTTP auth dialogs are a security liability, as they blur the line between content and browser.

johannes1234321 on Feb 18, 2023 [–]

Yes and no. There is some part of it which helps to identify where you are connecting to. Meanwhile those dialogs aren't modal anymore, which allows access to https certificate info, but it is still complicated to provide trust for average users.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact