Security

• All RFCs must have a "Security Considerations" section.

• This section must describe the limitations, weaknesses, etc., of the protocol being described.

• The IESG will not knowingly approve an insecure protocol.

  • Plaintext passwords are by definition insecure...