MicrosoftIt appears that "Allow Basic Auth over HTTP" was added to the base Chromium build, so it will be supported cross browser. Now it will be a debate if we want to go off baseline to re-enable Basic but with the HTTPS req as a control/mitigation.
I will say, I prefer the Firefox authentication policy. It allows you to control per authentication scheme per origin, which give good granularity. So you can set something along the lines of 'only allow Basic auth to this domain or URL and block everywhere else'. The Chromium monolithic approach of a single authentication scheme list and a single kerberos delegation list can be limiting.
