RE: Encryption for FTP/MAil/Web

From: Christian Mengler (menglerc@synktech.net)
Date: 10/22/01 

From: "Christian Mengler" <menglerc@synktech.net>
To: <security-basics@securityfocus.com>
Subject: RE: Encryption for FTP/MAil/Web
Date: Mon, 22 Oct 2001 11:28:41 +1100
Message-ID: <FPEBLBJLHLENIHNPFCNIIEGLCBAA.menglerc@synktech.net>

Hey,
I've been looking into FTP encryption for the last few dayz, I found that
SSH only encrypts the authentication process, but not the transfering of
data. Although SSL, i read that it encrypts not only the authentication, but
also the data. Im not quite sure on what SSL FTP daemons are out there,
there is a few for *nix, eg SurgeFTP (www.freshmeat.net), but im not sure on
the availability for windows. But its worth a try looking for FTP
clients/servers supporting SSL :)

 - Christian

------------------

Hi all,
I have been tasked with finding and implementing solutions to provide
payroll vendors/401k vendors and health care providers with methods our
company can use to transmit encrypted files via Website (IIS), FTP, and
E-mail (Exchange). We are a total MS shop. I thought of looking to Verisign
for Website encryption, PGP possibly for e-mail, and don't have a thought on
FTP other than encrypting a zip file. We don't have anonymous login
available on FTP. Could I get some thoughts on Verisign and PGP and options
of FTP methods.

Thanks

Relevant Pages

  • Re: firewalls that can ssl ftp?
    ... Secure Transfers ... Bruce Schneier's Blowfish encryption for data transfers. ... Secure SSL based Web Administration Portal ... Works with other FTP Clients/Servers ...
    (Security-Basics)
  • Re: Temporary FTP Server - Security
    ... Very secure if you use FTP over SSL and verify the certificate by telephone. ... Either you were forgetting or omitting the obvious: need for encryption, ...
    (comp.security.misc)
  • RE: Encryption for FTP/MAil/Web
    ... Subject: Encryption for FTP/MAil/Web ... Tunneling ftp through ssh ... ssl-ftp can encrypt the control & data channel; ... As for ssl-ftp servers, I only found one RFC compliant one for Windows; ...
    (Security-Basics)
  • RE: Encryption for FTP/MAil/Web
    ... Subject: Encryption for FTP/MAil/Web ... An obvious choice for HTTP is SSL. ... I also believe that there are FTP servers ... this would require that your clients also use S/MIME. ...
    (Security-Basics)
  • Re: How to secure FTP?
    ... >> So I am also hearing in this thread that secure FTP isn't really ... It's meant more for encryption than anything else? ... > and password are required by the server in order to log on, ... > other mechanisms (such as SSL) that are supported by a number of third ...
    (microsoft.public.inetserver.iis.ftp)