Re: only password encrypted, all other data unencrypted!

qazmlp1209@xxxxxxxxxxxxxx writes:

I would like to know, whether there is a standard mechanism exists
with the following requirements:
- Only the password that is used while binding/establishing the
connection is sent in encrypted format via the client-server
connection interface.
- All the other data sent in the bind request and also any further
data(all requests, responses) sent over that connection is sent in a
simple/unencrypted way.

This might be a basic question, but I seriously did not get an idea
about it!

I am aware of only the following related to it:
- Simple connection interface, where everything including the
password is sent in plain/ASCII/unencrypted format.
- SSL connection interface, where all the data are sent in encrypted
format.

Please provide me the pointers!

If you told us what problem you were having or trying to solve maybe we
could help you more. The standard is to encrypt everything. Why is that a
problem?


.