>Don't just use one of the unprotected services that get unencrypted data

I think that's obvious, since the days of telnet/rsh.