For each supported authentication and transport method:
1. Authenticate a user while capturing the network traffic for the entire authentication process, then
2. search the captured traffic for a plaintext string matching the user's credential.
2. search captured traffic for a plaintext string matching the user's credential, then
3. search captured traffic for common reversible encodings of the credentials, including but not limited to Base64, hexadecimal encoding and URL encoding.
#### 6.6.3.4 Verdict
PASS if **all** of the following are fulfilled:
*No plaintext string matching the user's credential is found.
*Credentials or authentication material are not observable in plaintext or in trivially reversible encodings.
