On: Using HTTP Basic Auth in 2022

[mikea1]

The salt-and-hash combo is how email logins worked for decades. The problem with this approach is that what you really want different salts, which requires that the server knows the plain text password.