1/2 OT: ASA proxy auth behaviour...

Hi,
I'm unwilling to believe something I have read:
cisco says that if you have basic (i.e. traditional intercept) http
authentication proxy enabled, your credentials are forwarded to
the initial web server you were accessing when the authentication
happens.
If this is http, this in turn goes in cleartext, so it makes a big
security issue.

Now, why would it do that ? I mean, forward the credentials...

Perplexed,
-Carlos

-- 
Carlos G Mendioroz  <tron_at_huapi.ba.ar>  LW7 EQI  Argentina
Blogs and organic groups at http://www.ccie.net