Alan wrote (2021-02-05):

 Ol>> define 'secure' ;)

 Ol>> "grep CRYPT" doesn't return a match on the Winpoint files.

 AI> I'm not sure that CRYPT is all that secure either, but I guess it is
 AI> better than nothing.

It obfuscates most of the data stream. I doubt that any agency is automatically
decrypting binkp data that's on the wire. Biggest disadvantage with CRYPT is
that it requires a shared password.

 AI> If we can authenticate with a password, hopefully a
 AI> CRAM-MD5 handshake that will do.

"grep CRAM-MD5" returns a match on WpointII.exe.

 AI> Winpoint is being updated I think, so there is hope that winpoints
 AI> shortcomings (if any) can be improved upon.

Where can I find the sources?

---