Re: Hotmail sign-in through Outlook Express -- clear-text?

• Original Message ----- From: "Kenzo" <kenzo_chin@hotmail.com> To: <security-basics@securityfocus.com> Sent: Friday, May 23, 2003 9:04 PM Subject: Re: Hotmail sign-in through Outlook Express -- clear-text?

> I'm pretty sure that it's not encrypted.

How? Can you tell me how to read that from the packets? I just did the same, and I could not see my password in clear text. Did see a lot of mentions of "MD5" among the packets, thought. Is the password simply a little "obfuscated" in some way?

I'm not very experienced in this, so I'd like to know if I missed something. Once before, I've seen people claim that it passwords (for VNC) were sent in clear text, but I couldn't see them then either. I use Ethereal for packet captures.

Cheers,
Anders :)