title: Does Oracle OCI function OCIPasswordChange encrypt transmitted password
body: <p>I am working on an application that uses Oracle OCI to connect to the Oracle database server.   The application allows the user to change their Oracle password and uses  <em>Alter User xxx Identified By</em> to perform this.</p>
  
  <p>However, this transmits the user's new password in clear text over the network (we cannot use Oracle SSL to encrypt network traffic).   I have found that Oracle recommends using the PASSWORD command in SQLPlus rather than ALTER USER, one reason being that the new password encrypted.</p>
  
  <p>Does the OCI method OCIPasswordChange also encrypt the new password when it is transmitted over the network?</p>
  
  <p>This is using Oracle 10 and 11.</p>