> What's the nature of the interaction between factotum and the > auth server? If somebody who owns the network can interpose > themselves between you and the auth server, can they end up > with your password, or at least authenticate once as you?
no. of course, if they can interpose between you and the file server then they can probably hijack the connection after you've authenticated. russ
