web site directory security? .htaccess or httpd.conf
 

What is the preferred/best method for securing a directory or an entire website? I am looking for an authentication method that will not send the ID and password in clear text.

I am using Apache 2.0 and the docs indicate that Authtype Digest may not be supported by all browsers?

Thanks,