Password Authentication Protocol: Difference between revisions

Revision as of 12:07, 26 March 2017

Revision as of 10:14, 12 September 2018

Line 1:

'''Password Authentication Protocol''' ('''PAP''') is a [[password]]-based [[authentication protocol]] used by [[Point to Point Protocol|Point to Point Protocol (PPP)]] to validate users. Almost all [[network operating system]] remote servers support PAP. PAP is specified in {{IETF RFC|1334}}.

PAP is considered a weak authentication scheme (weak schemes are simple and have lighter [[overhead (computing)|computational overhead]] but are much more vulnerable to attack; while weak schemes may have limited application in some constrained environments, they are avoided in general). Among PAP's deficiencies is the fact that it transmits unencrypted passwords over the network. PAP is therefore used only as a last resort when the remote server does not support a stronger scheme such as [[Challenge-handshake authentication protocol|CHAP]] or [[Extensible Authentication Protocol|EAP]].