RE: Non-SSL CAX - clear text passwords?

["Shea, David" <DShea@xxxxxxxxxxxx>]

Client Access Express.

++++++++++++++++++++++++++++++++++++++++++++
Go... FASTER!  Without an upgrade!  With ARCTOOLS/400(tm)
http://www.arctools.com
info@arctools.com
DCSoftware, Inc.
Ph: (508) 435-8243
Fax: (508) 435-4498
++++++++++++++++++++++++++++++++++++++++++++

 -----Original Message-----
From:   Jim Franz [mailto:franz400@triad.rr.com]
Sent:   Tuesday, April 23, 2002 9:14 AM
To:     midrange-l@midrange.com
Subject:        Re: Non-SSL CAX - clear text passwords?

what version Client Access? all CAE (Express)?
jim

----- Original Message -----
From: "Shea, David" <DShea@arctools.com>
To: <midrange-l@midrange.com>
Sent: Tuesday, April 23, 2002 8:48 AM
Subject: Non-SSL CAX - clear text passwords?


> When using Client Access for telnet, you initially get the little pop up
> window asking for your user profile and password.  I believe that this is
> the 'signon server' task that talks to port 443 (or was it 446?
> whatever...).  I would assume (please correct me if I'm wrong) that this
> transaction is somehow encrypted (or at least not clear text).  After
> completing this task, you get the regular AS400 signon screen.
>
> If you're not running SSL, am I correct in assuming that all the traffic
> back and forth to the AS/400 is clear-text and therefore when I log on my
> user profile and password will be plainly visible to any packet sniffing
> scoundrel?
>
> Thanks.
>
> ++++++++++++++++++++++++++++++++++++++++++++
> Go... FASTER!  Without an upgrade!  With ARCTOOLS/400(tm)
> http://www.arctools.com
> info@arctools.com
> DCSoftware, Inc.
> Ph: (508) 435-8243
> Fax: (508) 435-4498
> ++++++++++++++++++++++++++++++++++++++++++++
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@midrange.com
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
> or email: MIDRANGE-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>
>


_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
or email: MIDRANGE-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.