What are the security risks in passing passwords in ftp URLs. For instance internet explorer takes in a url of the form ftp://username:email@example.com.
- Is the url transmitted in plain text?
- Can a man in the middle (or proxy server) view the request and see the password?
- Are there more secure ways/clients that encrypts the password across the wire?