Secure SQL Native Client Connection String

Hello,

When connecting to DASP hosted database (MSSQL 2005) using Management Studio does the user/pass get passed over the line in plain text?

Also, when I connect directly using SqlConnection class from within a .Net app, I can only connect if I choose to include user/pass in plain text. Is there any way to connect in a more secure way to DASP hosted databases?

Finally, when the data is being returned to the client from either the Management Studio or a native client connection, is that data also sent as plain text on the line? If so, is there a way to secure it?

TIA,
Rob