Re: Network Solutions Crypt-PW Authentication-Scheme vulnerability

[Peter Ajamian]

Peter W wrote:
> 
> Plus when you submit a change request template, your email contains the
> plaintext password. :-(
> 
> Changing your password means sending the cleartext value to NetSol via
> email. So changing your password involves risk. :-(

In my recent experience, the unencrypted password is only transmitted in
a secure www session, everything sent cleartext uses the encrypted form
(but with NetSols' encryption methods it may as well be plain-text).

Regards, Peter