Do you know anything about the nature of the password exchange between
  the PC and client to obtain AFS tokens?  Is it secure from eavesdropping
  attacks?

The password is not sent in the clear, but I don't think it's entirely
secure either.

Reply via email to