I use the new Arc Search as the default browser on iOS now and it's amazing with a few exceptions. You can't force an insecure connection, and sites with basic HTTP auth (like a lot of self-hosted stuff) won't let you... Auth. I have to use Safari for that (pictured).
@fredbrooker that's not the issue. This is behind Nginx Proxy Server, there is a LE cert. This app (Clapshot) only uses this type of auth, and the dialogue is not showing in Arc.
@stooovie Basic Auth can be monitored by Enterprise proxy connections, password can be stolen, no 2FA, bigger attack surface as the credentials are sent on every connection
I use server encrypted cookie with extra data and padding and and nonce and random rotation of content inside before encryption
Add comment