> authentication? I think I sniffed it once and didn't see plain text being > passed, but that doesn't mean it's secure. It's not plain text, it is base64 encoded. That is NOT encrypted, it's just encoded to handle a wider range of allowed characters.