Excellent post on protecting usernames/passwords

When sending the username and password over the wire in clear-text is not an option, and you don't want to use SSL.  Try the excellent suggestion on this site: http://pajhome.org.uk/crypt/md5/index.html