Is it safe to use login:[email protected]?

Question

User identification

Is it safe to use a link http://login:[email protected]for authorization if you are completely tired of constantly filling out passwords on some sites? Does this method differ in security from the usual one: I went to the site / service, then logged in? What does my provider see in this case?

Answer 1

The provider sees everything, login and password.
Under the HTTP protocol , all data is transmitted as is, in clear text.
Another thing is that links of this format can fall into the hands of not only the provider, but also other persons. Traffic is a bit harder to steal. It's better to use HTTPS . And it is recommended to avoid using links that contain a password, just to avoid mistakes on your part (for example, from banal fatigue or inattention). Ordinary users should not be shown this at all, for their own safety.

Answer 2

Alexey, are you saying that the login:password part is sent along with the URL? Or is it part of the data that each browser sends to the appropriate fields after it has opened this address?

Answer 3

Modern browsers have long ignored the basic authorization in the URL, so it will only work in the ancient ones.