It’s simple, but insecure unless wrapped in HTTPS. That’s why it’s almost never used in production anymore.

I mean, if you’re going to write a post about auth methods, you gotta say more than this.