Re: Hotmail sign-in through Outlook Express -- clear-text?

["Kenzo" <kenzo_chin () hotmail com>]

I'm pretty sure that it's not encrypted.
At one point I ran a sniffer and was able to see all the usernames and
password in clear text.

----- Original Message ----- 
From: <rdd37it () hotmail com>
To: <security-basics () securityfocus com>
Sent: Thursday, May 22, 2003 11:27 AM
Subject: Hotmail sign-in through Outlook Express -- clear-text?


> Hello All:
>
> I am wondering if the hotmail authentication through outlook express is
> encrypted in any way?  It doesn't appear to be, as the server (in Account
> properties) is listed as HTTP.  However, keep in mind that the hotmail web
> login is also an HTTP page which is run through HTTPS for the login.  Is
> the OE sign-in similar?  Also, on the Security tab of account properties,
> it does have 3DES selected for the encryption type...?
>
> I know I could just install a sniffer on my network to check it out for
> myself and see if the credentials are passed in cleartext, but I'm hoping
> someone here with knowledge on this matter can just give me a definitive
> answer, instead.  I have done several searches on this and other sites
> (including Microsoft) without locating a definite answer, as of yet...
>
> Thanks a lot for your responses!
>
> Bob
>
> --------------------------------------------------------------------------
-
> Thinking About Security Training? You Can't Afford Not To!
>
> Vigilar's industry leading curriculum includes:  Security +, Check Point,
> Hacking & Assessment, Cisco Security, Wireless Security & more! Register
Now!
> --UP TO 30% off classes in select cities-- 
> http://www.securityfocus.com/Vigilar-security-basics
> --------------------------------------------------------------------------
--
>

---------------------------------------------------------------------------
Thinking About Security Training? You Can't Afford Not To!

Vigilar's industry leading curriculum includes:  Security +, Check Point, 
Hacking & Assessment, Cisco Security, Wireless Security & more! Register Now!
--UP TO 30% off classes in select cities-- 
http://www.securityfocus.com/Vigilar-security-basics
----------------------------------------------------------------------------