I don't think there's any evidence that windows sends cleartext passwords. The w... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		gruez 41 days ago \| parent \| context \| favorite \| on: Microsoft mishandling example.com I don't think there's any evidence that windows sends cleartext passwords. The whole reason why NTLM is a thing is to avoid sending cleartext passwords.

lazide 40 days ago [–]

Outlook appears to be

p_ing 40 days ago | [–]

The 'https://' disagrees with your 'sending clear text passwords' statement.

lazide 40 days ago | | [–]

It’s clear text to the receiving server, which is what we’re talking about, not one way hashed.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact