Password Authentication Protocol: Difference between revisions

Revision as of 19:16, 16 February 2017

Revision as of 13:39, 25 February 2017

Line 1:

'''Password Authentication Protocol''' ('''PAP''') is a [[password|password-based]]-based [[authentication protocol]] used by the [[Point to Point Protocol]] to validate users. Almost all [[network operating system]] remote servers support PAP.

PAP is considered a weak authentication scheme (weak schemes are simple and have lighter [[overhead (computing)|computational overhead]] but are much more vulnerable to attack; while weak schemes may have limited application in some constrained environments, they are avoided in general). Among PAP's deficiencies is the fact that it transmits unencrypted passwords over the network. PAP is therefore used only as a last resort when the remote server does not support a stronger scheme such as [[Challenge-handshake authentication protocol|CHAP]] or [[Extensible Authentication Protocol|EAP]].

have limited application in some constrained environments, they are avoided in general). Among PAP's deficiencies is the fact that it transmits unencrypted passwords over the network. PAP is therefore used only as a last resort when the remote server does not support a stronger scheme such as [[Challenge-handshake authentication protocol|CHAP]] or [[Extensible Authentication Protocol|EAP]].

==Working cycle==