3 ms·

Not necessarily, the server can say it only supports basic auth and….

• gruez 9mo ago
  I don't think there's any evidence that windows sends cleartext passwords. The whole reason why NTLM is a thing is to avoid sending cleartext passwords.
  • lazide 9mo ago
    Outlook appears to be
    • p_ing 9mo ago
      The 'https://' disagrees with your 'sending clear text passwords' statement.
      • lazide 9mo ago
        It’s clear text to the receiving server, which is what we’re talking about, not one way hashed.