Re: Plain text passwords--necessary

[taral () TARAL NET (Taral)]

On Mon, 19 Apr 1999, Phillip Vandry wrote:

> Method  Client     Wire       Server
> ------  ---------  ---------  ---------
> PAP     Clear      Clear      Encrypted
> CHAP    Clear      Encrypted  Clear
>
> And I don't think we can do better than that. We can encrypt at only one
> stage of the process. We have to make a tradeoff.

Not true:

  PK      Clear      Encrypted  Encrypted

PK = public key encryption (yes, some can be used with arbitrary
passwords as private keys)

Taral