Re: Changing sftp-server to some other ftp server

From: Richard E. Silverman (slade@shore.net)
Date: 04/09/02 

From: slade@shore.net (Richard E. Silverman)
Date: 09 Apr 2002 03:13:59 -0400

>>>>> "Alvin" == Alvin <achanjunk@yahoo.com> writes:

    Alvin> Hello all I have been doing some research on secure ways of
    Alvin> using ftp. From what I read, sftp, that is using ssh over
    Alvin> normal ftp

No it isn't. Sftp has nothing to do with the FTP protocol; they are
entirely separate things.

    Alvin> I think someone mentioned that the ftp protcol in sftp-server
    Alvin> is using sftp2. What does that mean?

Nothing.

  
    Alvin> Is that have anything to do with ftp over ssl?

No.

    Alvin> Also with the subsystem calls, can you employ other services
    Alvin> over it?

In most implementations, you can define a subsystem which runs any program
you like on the server side.

  
    Alvin> I don't know how secure sftp-server is in the area of coding.

I don't recall any sftp-specific exploits to date.

    Alvin> Also sftp-server does not support restart [bytecount] command.
    Alvin> Not that there are any sftp client out there can take advantage
    Alvin> from it, but it is something I believe necessary for the future
    Alvin> of sftp.

You are mistaken; there is no change needed to sftp-server to support
partial file transfers. It would be a client-side feature.

    Alvin> Enough garble I suppoe and back to work

Indeed. 

-- 
  Richard Silverman
  slade@shore.net

Relevant Pages

  • Re: Changing sftp-server to some other ftp server
    ... How then do one need to re-write/re-hack the client side. ... > Alvin> using ftp. ... > Alvin> I don't know how secure sftp-server is in the area of coding. ...
    (comp.security.ssh)
  • Re: sftp Client on Windows XP
    ... On Thu, 27 May 2004, Saju Paul wrote: ... > I'm new to OpenSSH and have been tasked to write a 'sftp' Client for a ... see the windoze-based ssh and sftp apps ...
    (SSH)