3 ms·
can someone confirm that login info is sent in the clear? that's pretty terrible.
by philfreo 17y ago
can someone confirm that login info is sent in the clear? that's pretty terrible.
- j0 17y agoyep. they could have at least supported SASL to have the login info encrypted and then transport the rest of the stream unencrypted, but they did not.
- kam 17y agoThey claim they're using DIGEST-MD5, so not quite plaintext, but a broken hash algorithm http://www.facebook.com/help/?faq=16742 http://www.facebook.com/help/?faq=16742 http://www.facebook.com/help/?faq=16741 http://www.facebook.com/help/?faq=16741