Re: What is the difference between ftp encryption types SSL, TLS, SFTP and SSH ?



Marcus Mender skrev:
I have seen a couple of different encryption types for ftp connections:

TLS
SSL
SFTP
SSH

Ok, provided an ftp server offers all these types: which type should I choose
to setup the ftp server or to select from the ftp clients view ?

Is the security for all these types similar and the difference refers only different protocols?

What are the pros and cons ?

Marcus


Briefly:
SSL is an encryption type.
SSH is remote login using SSL to get encrypted command line access ("secure telnet")
SFTP is file transfer using SSL
TLS is an encryption type (AFAIK, like SSL, but different...)

SSL has fairly universal support across OS/HW platforms. So for the basic, "universally available" service you'd set up your server with SSL, to provide SSH (I guess a command line FTP client would use that) and SFTP support.
.



Relevant Pages

  • Re: Checkpoint NG with AI allowing FTP Auth SSL
    ... >> SSL Connect Failed ... >> a data port connection. ... > Try allowing high ports back from the ftp server. ... a potential bounce attack even though it stated that it accepted it ...
    (comp.security.firewalls)
  • Re: FTP SSL from a server
    ... I need to get some files from a FTP server that uses SSL over port 990. ... "Secure connection error, return code -23." ... That error message means that the certificate being used ...
    (comp.sys.ibm.as400.misc)
  • Re: Checkpoint NG with AI allowing FTP Auth SSL
    ... > Initializing SSL Session ... ... Just a port 21 service with no protocol type will never work, ... firewall has know way to know anything about the back connection from the ... Try allowing high ports back from the ftp server. ...
    (comp.security.firewalls)
  • Re: Net::FTPSSL error
    ... FreeBSD 6.0-RELEASE ... I'm trying to use Net::FTPSSL to connect to an FTP server via SSL. ... Here is the script: ...
    (freebsd-hackers)
  • Exchange 2007 SMTP SSL
    ... mark The requires (SSL) getting an error: ... encryption type you have specified. ... Contact your mail server administrator or Internet service provider ...
    (microsoft.public.exchange.admin)