What if I send it over https https://foo:bar@dump.ansman.se/basic-auth/foo? I don't think it should be insecure in this case.