See [wiki:"faq/security/cgi-basic-auth"].