secure change-password protocol after Digest authentication?

[Frank Siebenlist <frank@dascom.com>]

How do you securely change your password from a client that only supports Digest authentication and doesn't have any heavy weight SSL/TLS at its disposal?

Could the unspecified "confidentiality protection" feature of Digest/SASL help out there?

Not sure if this is the right mailing list, but I couldn't find any discussion about this topic anywhere.

-Frank.

-- 
Frank Siebenlist              DASCOM, Inc. 
Chief Architect               3004 Mission Street
Email: frank@dascom.com       Santa Cruz, CA 95060, USA
Phone: +1 831/460-3600        Fax: +1 831/460-0255