Involves sending a username and password with each request, but can be less secure without encryption.