title: Is RabbitMQ Authentification secure without SSL?
body: <p>We are using RabbitMQ, we'll expose the server over the internet.  We'll have multiple clients from multiple computers accessing the server.  Our first instinct would be to enable SSL but this seems like a lot of pain from the documentation, specially with Windows and .NET.</p>
  
  <p>We can manually encrypt our messages and make sure that important information can't be sniffed, but we are more concerned about authentification and authorization.</p>
  
  <p>Is the default login architecture from RabbitMQ secure or we really need to enable SSL for 100% secure login and authorization?  Could someone sniff vhost/username/password when a client logins to RabbitMQ remotly?</p>
  
  <p>Thanks,</p>