3 ms·

This includes the login I guess...

• deleted 17y ago
  [deleted]
• philfreo 17y ago
  can someone confirm that login info is sent in the clear? that's pretty terrible.
  • j0 17y ago
    yep. they could have at least supported SASL to have the login info encrypted and then transport the rest of the stream unencrypted, but they did not.
  • kam 17y ago
    They claim they're using DIGEST-MD5, so not quite plaintext, but a broken hash algorithm http://www.facebook.com/help/?faq=16742 http://www.facebook.com/help/?faq=16742 http://www.facebook.com/help/?faq=16741 http://www.facebook.com/help/?faq=16741