Password Security

• Even with great passwords, what if they are sent clear on the network?
• Network Sniffers (read packets not meant for them).
• Challenge-Response Schemes
  • Is the same as the following?
  • Tell me the third letter and fifth letter of your password.
  • One-way functions (hard to invert. more of this later..)