What am I missing!?...Are the administrative logins/passwords to the web admin service being sent in the clear or are there non SSL protections in place?  We have policies against using remote administration tools that do not have some from of encryption to protect administrative logins and connection even if the connection takes palce over tursted networks.  I am not finding any answers to my questions in the documentation or knowledge base.

It seems very strange to me that I can find out how to turn on SSL using IIS for the user web access, but I cant find any information about the encryption/security messures of the remote web admin service. Do I have to be using IIS before I can protect my remote administration connections?

For now, we are only connecting using localhost, until we find a solution or replace the software.  Why would you ever use authenticated remote web admin tools without using known encryption methods?  I do not want my passwords and configuration settings going over the network in the clear.

I really feel like I am overly looking something, becuase I cant believe someone has not had an issue with this before.

Thanks...

David