Comment by vivekjishtu

What if I send it over https https://foo:[email protected]/basic-auth/foo? I don't think it should be insecure in this case.