mechanism. It prevents password sniffing and avoids storing passwords

on the server in plain text but provides no protection if an attacker

manages to steal the password hash from the server. Also, the MD5 hash

algorithm is nowadays no longerconsider secure against determined

algorithm is nowadays no longerconsidered secure against determined

attacks.

</para>