RE: Clear text credentials?

I found this documentation which confirms that 10g onwards client is encrypting the passwords: http://download.oracle.com/docs/cd/B19306_01/win.102/b14304/admin.htm#sthref294

My other question still stays open.. is there a toned down version of ASO (40 or 56-bit) encryption available for free? Thanks
-Upendra

From: nupendra_at_hotmail.com
To: oracle-l_at_freelists.org
Subject: Clear text credentials?
Date: Tue, 1 Mar 2011 14:38:26 -0500

Hello guys,
Question..
When someone connects from Host_A to Host_B and if the communication is not encrypted using Advanced Security Option (ASO) or a similar mechanism, would the user credentials be sent in Clear Text? If so, is there a way to secure it? The requirement is to protect the username/password without using ASO/SSH Tunnel.

If my memory serves correctly, a lower version of ASO (40 or 56-bit) encryption is available for free? Is that true?

Your feedback is appreciated.
Thanks
-Upendra
                                               

--

http://www.freelists.org/webpage/oracle-l Received on Tue Mar 01 2011 - 13:59:50 CST