CHAP passwords in cleartext

thoth@purplefrog.com
Thu, 05 Sep 1996 10:32:46 EDT

I was just thinking. If some people are nervous about storing CHAP
passwords in cleartext, why not encrypt them with the portmaster secret?

1) if someone can read your RADIUS user database, they can probably access
the shared secrets file

2) The secret on one PM may be different from the secret on another.

The added security would be marginal.