Re: PPP password.

Nicholas Brenckle (nicholas.brenckle@yale.edu)
Tue, 09 Feb 1999 12:12:02 -0500

> I have heard some stuff in the
> newsgroup that telnet and the email client (using POP) in the Netscape
> Communicator sends the password in the clear. Could anyone
> verify/substantiate this and provide answers/hints that will lead to
> solutions?

Telnet, and POP/IMAP all send passwords in the clear. The way around the
POP/IMP situation is to use Kerberos instead of password authentication.
(Eudora does to Kerberos, Netscape does not) You can also use SSL - an
encrypted wrapper around your POP or IMAP session. (Netscape supports SSL)
HostExplorer will do Kerberos authentication or you can use SSH (secure
shell).

That answers the question briefly, if you have some specific instances you'd
like to know - ask away.

--
----------------------------------------------------------------------
Nicholas Brenckle                   Yale University School of Medicine
nicholas.brenckle@yale.edu                     ITS Med - PO Box 208089
203-737-2377                                  New Haven, CT 06520-8089