Re: Network Solutions Crypt-PW Authentication-Scheme vulnerability

[Peter Ajamian <peter () pajamian dhs org>]

Peter W wrote:
> Plus when you submit a change request template, your email contains the
> plaintext password. :-(
>
> Changing your password means sending the cleartext value to NetSol via
> email. So changing your password involves risk. :-(

In my recent experience, the unencrypted password is only transmitted in
a secure www session, everything sent cleartext uses the encrypted form
(but with NetSols' encryption methods it may as well be plain-text).

Regards, Peter