Win passwords - transmission to server

Win passwords - transmission to server
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 General Computer Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Win passwords - transmission to server Andrew Brydon 11-27-2005
Posted by Andrew Brydon on November 27, 2005, 1:36 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Does Windows XP encrypt passwords for the transmission to the server
for verification?

If it does, in which version of Windows did this start - I believe in
earlier versions the password was transmitted in clear.
--
Andrew Brydon
Life is just the beta-version of death

Posted by Volker Birk on November 27, 2005, 1:02 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
> Does Windows XP encrypt passwords for the transmission to the server
> for verification?
> If it does, in which version of Windows did this start - I believe in
> earlier versions the password was transmitted in clear.

http://support.microsoft.com/default.aspx?scid=kb;en-us;239869

LAN Manager authentication is clear text. NTLM and the much more secure
NTLM2 are using encryption. Windows XP should use NTLM2 with servers,
which support that.

With CIFS, there is Kerberos support, too:

http://msdn.microsoft.com/library/en-us/cifs/protocol/cifs_security_and_authentication.asp

http://msdn.microsoft.com/library/en-us/cifs/protocol/cifs_kerberos_authentication.asp

Yours,
VB.
--
"Ich bin ein freier Mensch und werde jetzt von meinen Freiheitsrechten
Gebrauch machen - und zwar ausgiebig - natürlich nur in dem Rahmen, den
Otto Schily mir noch zur Verfügung stellt."
Wolfgang Clement am 10.10.05 als Noch-Superminister

Similar ThreadsPosted
passwords October 19, 2007, 11:42 am
Hashes and Passwords May 21, 2006, 5:36 am
Legality of decrypting passwords June 30, 2008, 8:48 am
Stored passwords vanished -- is it a bug or a virus? June 17, 2005, 6:35 pm
Stored passwords vanished -- is it a bug or a virus? June 17, 2005, 6:35 pm
how to programmatically prevent passwords being saved? November 14, 2005, 11:26 am
FAQ: How can I generate good strong passwords? December 5, 2005, 5:56 pm
FAQ: How can I generate good strong passwords? December 25, 2005, 11:33 am
FAQ: How can I generate good strong passwords? January 26, 2006, 11:35 am
FAQ: How can I generate good strong passwords? February 10, 2006, 3:26 pm

The site map in XML format XML site map

Contact Us | Privacy Policy