@techreport{newman-sasl-plaintrans-04, number = {draft-newman-sasl-plaintrans-04}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-newman-sasl-plaintrans/04/}, author = {Chris Newman}, title = {{Plaintext Password SASL Mechanism for Transitioning}}, pagetotal = 9, year = 1997, month = nov, day = 13, abstract = {Unencrypted plaintext passwords are the biggest single risk to Internet application protocol security. Unfortunately, they are widely deployed, often tightly integrated into operating system services and very difficult to replace in an interoperable fashion. This specification discusses some methods which can be used to eliminate unencrypted plaintext passwords. It also defines a SASL mechanism {[}SASL{]} which may be used by newer protocols such as ACAP {[}ACAP{]} to transition away from a legacy authentication database.}, }