From: Ronak Patel <ronak2121_at_yahoo.com>
Date: Sun, 6 Jun 2010 14:21:35 -0700 (PDT)

Hello,

I had a question about how secure the tokens that are generated by the server are when we use the OpenAM Identity Services.

Would these tokens, when sent through cleartext, be vulnerable to man in the middle or session hijacking attacks?

If so, should I be encrypting all traffic being sent to the server that uses Identity Services?

Thanks,

Ronak