Search code examples
basic-authenticationphishing

iOS Safari suggests "phishing" when passing username:password to @url

Passing a username and a password for Basic Authentication is comfortable; But not if iOS Safari tells me to stay away from my website every time.

Example URL

http://bytecode77:[email protected]

Is there anything I can change in my code or webserver configuration to avoid such suspiciousness?

phishing warning

Solution

  • AFAIK, user credentials in URLs have been removed for security reasons and no longer appear in the protocol specs. I read that Chrome and IE do not support that at all anymore.