PPTP security

[cgmckeever]

was wondering if prior to the client/server handshake if the PPTP login and password are passed in plain text?

I am trying to work on an easy to implement VPN, and was told that PPTP passes all information before connection clear.

thanks

[bsdjunkie]

Its my understanding that PPTP creates a tunnel setup first and then uses GRE to enscapulate the PPP packets. But, it has been awhile since Ive read up on it. You can find out for sure here:

http://asg.web.cmu.edu/rfc/rfc2637.html

[cgmckeever]

thanks for the link