There are various problems with HTTP authentication. In this series I discuss the various problems and their solutions.

Introduction

Many have cited problems with HTTP authentication (as opposed to session-based authentication, which has its own problems).

Problems often cited include:

1. Authentication Is Not Optional
2. User Interface
   1. Discontinuity with site theme makes interface jarring
   2. Username prompt may confuse the user
   3. Not obvious what to do if you forgot your password
   4. Not obvious what to do if you don't have an account
3. No Logout facilities
4. Difficult to do single-sign on
5. Lack of Internationalisation
6. Poor software support

Descriptions of these problems and related solutions are in the articles linked below.

Background reading

Since REST [1] fans like HTTP Authentication, I present a link to a REST book, as well as to a HTTP book.

Additional reading

While not really part of this series, the article HTTP 1.2 -- What it needs [2] is related.