outlook user/password in clear

I notice that when I use my outlook 2000 sp1 with XP I can see the user name
and password in the clear as it goes to the SBC sever they say it is a M/S
problem or I have a password cracker allowing it to go out that way. Well I
know I have no cracker sw. fresh install. Is this the way outlook normally
sends out user/password or maybe Iam missing a setting.

Karl
Sat Mar 19 10:20:27 CST 2005


"gmsecguy" <gmsecguy@mail.com> wrote in message
news:eMUkDvJLFHA.3908@TK2MSFTNGP10.phx.gbl...
> I notice that when I use my outlook 2000 sp1 with XP I can see the user
name
> and password in the clear as it goes to the SBC sever they say it is a M/S
> problem or I have a password cracker allowing it to go out that way. Well
I
> know I have no cracker sw. fresh install. Is this the way outlook normally
> sends out user/password or maybe Iam missing a setting.

It's not a MS flaw, your email client is using whatever standard
non-Microsoft protocol that is enabled on your mail server. MS provides
ways to encrypt this, but it's up to your mail server admin to make it
possible for you to use these. Most people and servers use unencrypted POP3
and SMTP and/or IMAP for authentication and communication, especially for
Internet email. I'm not sure who is saying this is a MS problem or why they
are saying it, but they are dead wrong. Get them to provide specifics on
why it is a MS problem and what encrypted protocols they have enabled on
their mail server. They would need to provide instructions as to how to
enable whatever kind of encryption they have decided to use, not MS.

gmsecguy
Sat Mar 19 10:25:44 CST 2005

Thanks.
I figured as much. SBC global support saying that it is my client. I wanted
to make sure I had some others opinions .
"Karl Levinson, mvp" <levinson_k@despammed.com> wrote in message
news:udJu46JLFHA.2716@TK2MSFTNGP15.phx.gbl...
>
> "gmsecguy" <gmsecguy@mail.com> wrote in message
> news:eMUkDvJLFHA.3908@TK2MSFTNGP10.phx.gbl...
> > I notice that when I use my outlook 2000 sp1 with XP I can see the user
> name
> > and password in the clear as it goes to the SBC sever they say it is a
M/S
> > problem or I have a password cracker allowing it to go out that way.
Well
> I
> > know I have no cracker sw. fresh install. Is this the way outlook
normally
> > sends out user/password or maybe Iam missing a setting.
>
> It's not a MS flaw, your email client is using whatever standard
> non-Microsoft protocol that is enabled on your mail server. MS provides
> ways to encrypt this, but it's up to your mail server admin to make it
> possible for you to use these. Most people and servers use unencrypted
POP3
> and SMTP and/or IMAP for authentication and communication, especially for
> Internet email. I'm not sure who is saying this is a MS problem or why
they
> are saying it, but they are dead wrong. Get them to provide specifics on
> why it is a MS problem and what encrypted protocols they have enabled on
> their mail server. They would need to provide instructions as to how to
> enable whatever kind of encryption they have decided to use, not MS.
>
>
>