Re: FTP vs. encryption

From: Ian Wade (ian.wade@netro.co.uk)
Date: 06/10/02 

From: Ian Wade <ian.wade@netro.co.uk>
Date: Mon, 10 Jun 2002 07:55:22 +0100

In article <bFEM8.12717$U7.147560@vixen.cso.uiuc.edu>, Damian Menscher
<menscher+security@uiuc.edu> writes
>Bob Warner <bob.warner@state.co.us> wrote:
>> I have a request from a user to evaluate a secure means of
>> transmitting files. The choices I have are encrypted files _OR_ FTP.
>
>FTP sends passwords and data in the clear. If you want both
>passwords and data encrypted, use sftp.
>
>Personally, I'd like passwords encrypted but not data (takes too
>much CPU time when transferring multiple gigs). But AFAIK, such
>a program doesn't exist. Maybe I'll get around to writing one
>some day.
>
>Damian Menscher

Damian, it's already done. See SafeTP that someone else mentioned in
this thread. With SafeTP you can select whether you want just the
authentication to be encrypted or the whole session.

Ian

Relevant Pages

  • Re: FTP vs. encryption
    ... >FTP sends passwords and data in the clear. ... >Damian Menscher ... With SafeTP you can select whether you want just the ...
    (comp.security.misc)
  • Re: FTP External Intranet Access
    ... gain CMD access to the server and change things around on the OS ... I like Susan's idea of a third party, non AD integrated FTP service. ... LOphtCrack to brute force the passwords. ... SBS Golfer wrote: ...
    (microsoft.public.windows.server.sbs)
  • Re: can ping, but cant ftp
    ... > A SETPARMS.arpa.sys file has never been included in a FTP ... > implementation of security/3000 passwords (instead of MPE ... >> I have customers from all over the world logging to my ...
    (comp.sys.hp.mpe)
  • Re: 100s of logon errors for MSFTPSVC, event id: 100
    ... You have FTP exposed to the outside world, hackers have seen it listening on port 21, and are trying a variety of common passwords to see if they can fluke it. ... Its easy for a script to scan thousands of IP addresses for an FTP server, ...
    (microsoft.public.windows.server.sbs)
  • Re: 100s of logon errors for MSFTPSVC, event id: 100
    ... Giving only that user access by way of a username will still create hacking attempts. ... To secure it down, if users have fixed IPs you can configure FTP to deny all, except relevant IPs ... > a user who uses a weak password, hackers may manage to guess it. ... > "somecompany.com" Of course if all of your users have strong passwords> the ...
    (microsoft.public.windows.server.sbs)