What are the security risks in passing passwords in ftp URLs. For instance internet explorer takes in a url of the form ftp://username:firstname.lastname@example.org.
- Is the url transmitted in plain text?
- Can a man in the middle (or proxy server) view the request and see the password?
- Are there more secure ways/clients that encrypts the password across the wire?