Password Authentication Protocol, sometimes abbreviated PAP, is a simple authentication protocol used to authenticate a user to a remote access server or Internet service provider (ISP). PAP transmits unencrypted ASCII passwords over the network and is therefore considered insecure.
See also:
CHAP - Challenge-handshake authentication protocol
When the remote host password is kept as a one-way transformed value, and the algorithm for the transform function is implemented in the local server, the plaintext password SHOULD be locally transformed before comparison with the transformed password from the remote host.
PAP Codes are assigned as follows: 1 Authenticate-Request 2 Authenticate-Ack 3 Authenticate-Nak Identifier The Identifier field is one octet and aids in matching requests and replies.
Password The Password field is zero or more octets and indicates the password to be used for authentication.