[Fedora-suds-list] RFC: proposed WSSE change is suds

According to the document, there are two mandatory elements - UserName and Password, and two optional elements - Nonce and Created. If Nonce and Created are not used, then Password contains the actual password, sent in the clear. If Nonce and Created are used, then Password must be constructed as follows Password_Digest = Base64 ( SHA-1 ( nonce + created + password ) ) This gives some degree of protection over the password. It seems to me that suds allows use of Nonce and Created, but still sends the password in the clear, which rather defeats the object. Does this sound right, or am I missing something?