Re: scp vs. sftp vs ftp

From: Stuart Lamble (sjl@debtemp.lib.monash.edu.au)
Date: 02/05/02 

From: sjl@debtemp.lib.monash.edu.au (Stuart Lamble)
Date: 5 Feb 2002 03:29:08 GMT

In article <3C5F4F37.CB84D2F6@nospam_dtbakerprojects.com>, Dan Baker wrote:
>ok... this brings up a question I've been meaning to ask as a total
>newbie to SSH and its implications...
>
>is transferring files via scp more secure only with respect to the
>actual contents of the files being transferred,
>OR,
>is it more secure in any way with respect to hackers being able to get
>into a server set up to only allow scp access and not ftp?
>
>I ask because I have one client with a host that does not allow ftp
>access, and insists on scp file transfers. I am wndering if it is
>actually any more secure with regard to the server, or just protecting
>the data in transit.

With ftp, (except perhaps -- haven't used it -- sftp), the password is
transmitted in the clear. scp encrypts the username and password, so
that's one way that it protects you.

In addition, as you say, the contents of the file are encrypted in the
transfer.

HOWEVER, it is (AFAIK) nearly impossible to allow scp without allowing
ssh into the system. ftp will let you do this, though. If it is important
to you to prevent login access to the system, scp is not your best bet;
you may want to look into ssl-ftp or similar (my Web access at the moment
is non-existent, so I can't go googling for information.)

Standard disclaimers: ICBW, etc.

HTH,

Stuart. 

-- 
"You didn't slay the dragon?!"
"It's on my to-do list, now come on!"
  -- Shrek.

Relevant Pages

  • Re: Backup?
    ... Zur Verfügung stehen FTP, SSH, SCP und RSYNC. ... Es geht auch mit SSH oder SCP. ... welche Daten bereits per FTP übertragen wurden? ...
    (de.comp.os.unix.linux.misc)
  • Re: Intruders good job -- Change my root password
    ... there is no way to be sure you are safe. ... >> ftp isn't too bad, if you set it up in a chroot jail, but they can be ... >ssh may the better to sftp, but I don't know how to use it. ... scp and sftp. ...
    (comp.os.linux.security)
  • Re: Sicheres FTP?
    ... AFAIK ist das nur ein FTP auf SSH-Basis. ... Also im grunde nichts anderes als SCP, ... Putty kann. ...
    (de.comp.security.misc)
  • scp much slower than ftp (again).
    ... scp tends to be slower than ftp because it ... Is it possible to tell ssh ... remote ftp daemon in the FTP "language" over the SSH channel.... ...
    (comp.security.ssh)
  • Re: scp vs. sftp vs ftp
    ... > Bob> What is the difference between scp and sftp? ... is transferring files via scp more secure only with respect to the ... is it more secure in any way with respect to hackers being able to get ... I ask because I have one client with a host that does not allow ftp ...
    (comp.security.ssh)