Re: [twsocket] How secure is the NTLM authentication?

On 06-May-05 08:54:32 Marcello Vezzelli wrote: >Maurizio Lotauro wrote: >> Hello, >> >> I made some authentication test with the THttpCli component. I use >> Ethereal to see what the component send and receive. With my big >> surprise, when the component made an authentication using NTLM, >> Ethe

Re: [twsocket] How secure is the NTLM authentication?

AFAIK, Win 98 and ME can use plaintext authentication when the server is configurated to allow plaintext auth. Later Win versions forbid plaintext auth by default (there is some registry value you have to change if you want to enable plaintext authentication). Benjamin Marcello Vezzelli wrote:

Re: [twsocket] How secure is the NTLM authentication?

Maurizio Lotauro wrote: Hello, I made some authentication test with the THttpCli component. I use Ethereal to see what the component send and receive. With my big surprise, when the component made an authentication using NTLM, Ethereal show me the credential as clear text!!! At this point the quest

[twsocket] How secure is the NTLM authentication?

Hello, I made some authentication test with the THttpCli component. I use Ethereal to see what the component send and receive. With my big surprise, when the component made an authentication using NTLM, Ethereal show me the credential as clear text!!! At this point the question is: the NTLM is "se