Computerweekly.com picked up my article "There is more to the recent Cisco Wireless OTAP issue that isn’t being widely reported." about the controller information being sent in the clear when OTAP is disabled.
Read more about it here:
http://www.my80211.com/storage/video-cisco-access-points-give-away-network-secrets.htm