Re: Newbie question on using SSH and FTP

From: Chris Mattern (matternc_at_comcast.net)
Date: 12/17/04

  • Next message: bostontechgroup: "Re: How can I get an alert if someone views or changes syslog." 
    Date: Fri, 17 Dec 2004 10:06:49 -0500

    Barry Margolin wrote:

    > In article <APadnSlznrHiiV_cRVn-pQ@comcast.com>,
    > Chris Mattern <matternc@comcast.net> wrote:
    >
    >> Barry Margolin wrote:
    >>
    >> > In article <u5rkr0d4q5cmned2aqdbrn9gt35a296oer@4ax.com>,
    >> > Mike <no@spam.com> wrote:
    >> >>
    >> >> Well, then why do most admins still use ftp and SSH together?
    >> >
    >> > Because one vulnerability is better than two.
    >> >
    >> ??? You'll have to expand on that. How does using two server
    >> programs instead of one make for one vulnerability instead of two?
    >
    > If you use TELNET and FTP, you're exposing your password in two
    > different protocols. If you use SSH and FTP, you're only exposing it in
    > one. The fewer times your password goes over the network in the clear,
    > the less likely it is that it will happen while someone is sniffing.
    >
    But if you use only SSH (which does the work of both Telnet and ftp),
    you're exposing your password in NO protocols, which is best of all. 

    -- 
             Christopher Mattern
"Which one you figure tracked us?"
"The ugly one, sir."
"...Could you be more specific?"
  • Next message: bostontechgroup: "Re: How can I get an alert if someone views or changes syslog."

    Relevant Pages

    • Re: Does OpenSSH use RCP?
      ... SSH has the concept of subsystems. ... those subsystems are protocols in higher layers for SSH. ... If you agree with me, that FTP is ugly, why do you argue? ... Leidenschaft fehlt, das wirklich Wichtige lernt man dabei nicht, und die ...
      (comp.security.unix)
    • Re: help for a newbie
      ... D> using SSH ... It is not clear what you mean by this -- SSH and FTP are different ... protocols. ... Richard Silverman ...
      (comp.security.ssh)
    • RE: FTPD & SSHD server
      ... I think you are confused about difference between ssh and FTPD. ... This FTP software gives FTP protocol ... not used over the public internet. ... high port number for data channel in passive mode. ...
      (freebsd-questions)
    • Re: Secure file transfer
      ... We're talking about SFTP, which is a variant how to use SSH to secure the ... FTP protocol. ... is it better to use AUTH SSL or SSH/SFTP?" ...
      (comp.security.misc)
    • Re: Secure file transfer
      ... We're talking about SFTP, which is a variant how to use SSH to secure the ... FTP protocol. ... "FTP over SSH" is the protection of the command channel. ...
      (comp.security.misc)