We use NTLMv2 where available for authentication, which does not send passwords in the clear. Kerberos is also available as an authentication protocol, and it also does not at any point send credentials in the clear.
Are my passwords ever sent in the clear?
