ECSS: EC-Council Certified Security Specialist

By ECCouncil · Question Mode

QuestionQ49

VerifiedInformation Security Threats and Attacks

Basic authentication is the simplest authentication form available to web applications. The basic authentication mechanism requires a simple sign-in using a user ID and password for each realm. Basic authentication is especially exposed to which one of the following attack types?

Explanation

HTTP Basic authentication transmits user credentials in an encoding rather than encryption. Without transport protection such as TLS, a network sniffer can capture the credentials in transit and decode them. RFC 7617 identifies cleartext password transmission over the network as the scheme’s principal security flaw.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!