Currently, I am working on client authentication. Is there way to encrypt the password before sending it to the server. I am currently using JBoss 3.2.1 and also using callBackHandler to pass username and password to the JBoss server. The username and the password is still sending as clear text, and I am conern about the security vulnerability....any examples or documentation will be helpful if there is any.... thanks in advance.