title: Why should I use HTTP basic authentication instead of username and password post parameters?
body: <p>I have an API endpoint <a href="https://www.example.com/api/authentication" rel="noreferrer">https://www.example.com/api/authentication</a> which takes username and password as input and returns an authentication token.  </p>
  
  <p>In terms of passing username and password, I have two options (at least), namely:</p>
  
  <ol>
  <li>HTTP Basic Authentication (which passes credentials as part of HTTP headers)</li>
  <li>HTTP POST parameters</li>
  </ol>
  
  <p>I understand that neither method provides encryption (hence the use of HTTPS/SSL).  I also understand why using HTTP GET is is a Bad Idea.</p>
  
  <p>Is there any real difference (aside from the fact that basic authentication feels more idiomatic) between the two methods?</p>