Hi,
I am new to Web API, my first work on Web API. I have to build a web api service tat will be called from internet. I understand that when Web API service is hosted in IIS, I can set it up with credentials. For web, I read that credentials will be passed in clear text, so does it mean that basic authentication is not secure. I do not know if my client will agree to HTTPS. Is there any other way to make basic authentication secure for Web API?
Thank you.
