--- src/http.c
+++ src/http.c
@@ -105,12 +105,20 @@
   }else{
     zSep = "/";
   }
   blob_appendf(pHdr, "POST %s%sxfer/xfer HTTP/1.0\r\n", g.urlPath, zSep);
   if( g.urlProxyAuth ){
-    blob_appendf(pHdr, "Proxy-Authorization: %s\n", g.urlProxyAuth);
-  }
+    blob_appendf(pHdr, "Proxy-Authorization: %s\r\n", g.urlProxyAuth);
+  }

+  // Basic HTTP Authorization

+  if( g.urlUser && g.urlUser[0] && g.urlPasswd ){

+      char *zpw = mprintf("%s:%s", g.urlUser, g.urlPasswd);

+      char *zpw64 = encode64(zpw, strlen(zpw));

+      free(zpw);

+      blob_appendf(pHdr, "Authorization: Basic %s\r\n", zpw64);

+      free(zpw64);

+  }

   blob_appendf(pHdr, "Host: %s\r\n", g.urlHostname);
   blob_appendf(pHdr, "User-Agent: Fossil/" MANIFEST_VERSION "\r\n");
   if( g.fHttpTrace ){
     blob_appendf(pHdr, "Content-Type: application/x-fossil-debug\r\n");
   }else{