<BODY STYLE="font:10pt verdana; border:none;"><DIV>I always use digest from my client to the server when connecting, but I thought I noticed that passwords were still in clear text when receiving presence messages from transports (MSN, ICQ, etc.)</DIV> <DIV> </DIV> <DIV>Maybe this is specific to JabberCOM -- Peter?<BR></DIV> <DIV><BR></DIV> <BLOCKQUOTE style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px"> <DIV style="FONT: 10pt Arial">----- Original Message -----</DIV> <DIV style="BACKGROUND: #e4e4e4; FONT: 10pt Arial; FONT-COLOR: black"><B>From:</B> David Waite</DIV> <DIV style="FONT: 10pt Arial"><B>Sent:</B> Thursday, October 19, 2000 4:53 AM</DIV> <DIV style="FONT: 10pt Arial"><B>To:</B> jdev@jabber.org</DIV> <DIV style="FONT: 10pt Arial"><B>Subject:</B> Re: [JDEV] Connecting to the server.</DIV> <DIV><BR></DIV>userIDs it must transmit in the clear (unless you can think of something<BR>'really' clever). Passwords can be transmitted in a digest (hashed)<BR>format, assuming the client and server support this.<BR><BR>SSL is overkill for anything that is to scale, but SASL was at least<BR>considered a while back.<BR><BR>-David Waite<BR><BR>Ted Rolle wrote:<BR><BR>> Why does Jabber transmit userids and passwords in the clear?<BR>><BR>> _______________________________________________<BR>> jdev mailing list<BR>> jdev@jabber.org<BR>> http://mailman.jabber.org/listinfo/jdev<BR><BR><BR>_______________________________________________<BR>jdev mailing list<BR>jdev@jabber.org<BR>http://mailman.jabber.org/listinfo/jdev<BR> <DIV></DIV></BLOCKQUOTE></BODY><DIV><BR>___________________________________________________________<BR>Get more from your time online. FREE MSN Explorer download : http://explorer.msn.com</DIV>