title: HTTP Basic Authentication credentials passed in URL and encryption
body: <p>I have a question about HTTPS and HTTP Authentication credentials.</p>
  
  <p>Suppose I secure a URL with HTTP Authentication:</p>
  
  <pre><code>&lt;Directory /var/www/webcallback&gt;
  AuthType Basic
  AuthName "Restricted Area"
  AuthUserFile /var/www/passwd/passwords
  Require user gooduser
  &lt;/Directory&gt;
  </code></pre>
  
  <p>I then access that URL from a remote system via HTTPS, passing the credentials in the URL:</p>
  
  <pre><code>https://gooduser:secretpassword@www.example.com/webcallback?foo=bar
  </code></pre>
  
  <p>Will the username and password be automatically SSL encrypted? Is the same true for GETs and POSTs? I'm having a hard time locating a credible source with this information.</p>