PAP: Password Authentication Protocol l RFC 1334 l Password must be protected on both systems l Susceptible to eavesdropping and replay attacks l Serves as client authentication only: server could be an impostor l PAP was developed for the Point-to-Point Protocol PPP l Served well when connection was established on a dial-up line l PPP connections can now be established over shared networks (such as Ethernet using PPPoE) PAP is no longer used because considered not secure
{}