active directory "DirectorySearcher" security
-
Anybody out there know where I could go to lookup the process used for contacting AD via the DirectorySearcher object? What I am specifically looking for is what is used to send user password info across the wire. I am trying to create a connection with a Winform app. My concern is if someone other than the logged on account tries to access AD he/she has to enter a password, which means that either the DirecorySearcher either changes the user info into a token for transport, encrypts it to the standard AD format for comparison against the AD db, or it sends it unencrypted where it gets encrypted at the server and then compared... I've watched the net traffic of the DirectorySearcher and don't see anything (user info) in plain text, but didn't spend too much time trying to find it either. However I did see all the returned data from AD was ALL in plaintext, which is why i'm concerned about the securtiy of the user info. Any info, links, or wisdom shared is much appreciated. thankz,
string Beautiful; Beautiful = "ignorant"; label1.Text = "The world is full of " + Beautiful +" people."; Why is common sense such an un-common comodity?