Hacker News Reader

Comment by dylz | Hacker News Reader

A lot of phish already use HTTP auth.

    http://legitimate:www.bankofpaypai.com@460fc73627.ngrok.sexy

Plus, adding HTTP auth would totally fudge every tunneled app using HTTP auth for itself.