What to choose for authorization: pap, chap, mschap1, mschap2?

Question

VPN

It is clear that all these protocols have long been insecure, but some may be more insecure than others and they need to be disabled. I would be grateful for advice, especially with proofs.

Answer 1

Of the listed ms-chap v2.
PAP is generally a password in plain text.
The remaining CHAP variants have been compromised for a very long time and are less perfect.