[dev] password security during the session -- what is it?

Michael Bull mbull@uoguelph.ca
Wed, 20 Dec 2000 15:28:28 -0500


At 03:08 PM 20/12/2000 -0500, you wrote:


>They're transmitted from the browser to the Web server, and then
>stored on the webserver. They're then transmitted from the Web server
>to the IMAP server whenever necessary to establish an IMAP connection.

Thanks for the info, Rich -- how are they stored on the 
webserver?  Plaintext in memory as part of the PHP session?  That would be 
the last part of my question, I think.   Thanks again!