Security News > 2020 > April > Microsoft and Google delay online authentication change

Both Microsoft and Google have postponed a change that would have forced better application security by shutting down an insecure access protocol called Basic Authentication.

Specified in RFC 2617, Basic Authentication is a method of logging applications into online services using a simple username and password combination sent in an HTTP header.

Google also committed to turning off Basic Authentication.

Microsoft said on 3 April that it would postpone Basic Authentication for Exchange Online for those tenants using it, and now won't turn it off until the second half of 2021.

Google also announced at the end of March that it will postpone its Basic Authentication switch-off until further notice.

News URL

https://nakedsecurity.sophos.com/2020/04/14/microsoft-and-google-delay-online-authentication-change/