How secure is ACE?
ACE has been designed with security in mind. Your server administrative password is safe because ACE never transmits the password–encrypted or not–over the network. Instead, it uses a secure challenge and response mechanism. Both the client and the server must know the password in order to actually communicate but they never actually pass the password over the network. Instead one offers a challenge and the other offers a response. It is nearly impossible to produce the correct response without knowing the actual password. A hacker would not be able to intercept the response and use that information to start their own session, since it depends upon the challenge, which changes every time a session is begun. They would need to have the actual password in order to do anything.
