 A defining characteristic of the general notion of form-based authentication, as it is commonly used, is that the credential prompting and subsequent credential conveyance is conducted out-of-band relative to the transfer protocol employed between the client and server.For example, in the case of HTTP+HTML form-based authentication, the authentication features built into HTTP itself are not used.Rather, the prompting information, e.g., "username