Are passwords stored in clear text or encrypted?
Squid stores cleartext passwords in itsmemory cache. Squid writes cleartext usernames and passwords when talking to the external authentication processes. Note, however, that this interprocess communication occors over TCP connections bound to the loopback interface or private UNIX pipes. Thus, its not possile for processes on other comuters or local users without root privileges to “snoop” on the authentication traffic. Each authentication program must select its own scheme for persistent storage of passwords and usernames.
