The most important shortcoming of basic auth is the idea of building it into the protocol to begin with. Session authentication is superior to basic auth.