Home page logo
/

basics logo Security Basics mailing list archives

Re: Hotmail sign-in through Outlook Express -- clear-text?
From: "Kenzo" <kenzo_chin () hotmail com>
Date: Fri, 23 May 2003 14:04:01 -0500

I'm pretty sure that it's not encrypted.
At one point I ran a sniffer and was able to see all the usernames and
password in clear text.

----- Original Message ----- 
From: <rdd37it () hotmail com>
To: <security-basics () securityfocus com>
Sent: Thursday, May 22, 2003 11:27 AM
Subject: Hotmail sign-in through Outlook Express -- clear-text?




Hello All:

I am wondering if the hotmail authentication through outlook express is
encrypted in any way?  It doesn't appear to be, as the server (in Account
properties) is listed as HTTP.  However, keep in mind that the hotmail web
login is also an HTTP page which is run through HTTPS for the login.  Is
the OE sign-in similar?  Also, on the Security tab of account properties,
it does have 3DES selected for the encryption type...?

I know I could just install a sniffer on my network to check it out for
myself and see if the credentials are passed in cleartext, but I'm hoping
someone here with knowledge on this matter can just give me a definitive
answer, instead.  I have done several searches on this and other sites
(including Microsoft) without locating a definite answer, as of yet...

Thanks a lot for your responses!

Bob

--------------------------------------------------------------------------
-
Thinking About Security Training? You Can't Afford Not To!

Vigilar's industry leading curriculum includes:  Security +, Check Point,
Hacking & Assessment, Cisco Security, Wireless Security & more! Register
Now!
--UP TO 30% off classes in select cities-- 
http://www.securityfocus.com/Vigilar-security-basics
--------------------------------------------------------------------------
--



---------------------------------------------------------------------------
Thinking About Security Training? You Can't Afford Not To!

Vigilar's industry leading curriculum includes:  Security +, Check Point, 
Hacking & Assessment, Cisco Security, Wireless Security & more! Register Now!
--UP TO 30% off classes in select cities-- 
http://www.securityfocus.com/Vigilar-security-basics
----------------------------------------------------------------------------


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault