Re: security: PAP v CHAP

2001-05-24 Thread Kevin Ross
> Qn./ Which is more secure, PAP or CHAP? > > Some people said PAP, some told me CHAP. > If PAP is less secure, why most ISPs are using PAP for subscribers' > authentication? PAP sends your password in cleartext. CHAP uses an encrypted challenge-response method. Therefore, CHAP is more secure th

security: PAP v CHAP

2001-05-24 Thread Wilson Yau
Sorry to bother you about this trivial question, but I couldn't find any detail, authorised & satisfactory answers whether from Google search for "pap v chap" or "pap vs chap" or even within the context of several HOWTOs, e.g. PPP-HOWTO. I want to know the security issues between PAP & CHAP in PPP