Sun Java System Web Server 7.0 Update 5 Developer's Guide to Java Web Applications

HTTP Basic Authentication

HTTP basic authentication (RFC 2617) is supported by Web Server. Because passwords are sent with base64 encoding, this authentication type is not very secure. Use SSL or another equivalent transport encryption to protect the password during transmission.