Re: Wich one is more secure WebDAV/SSL or FTP

From: Eric Paschoalick Chaves (.eric.paschoalick_at_gradiente.com)
Date: 06/13/03


Date: Fri, 13 Jun 2003 14:47:30 -0300


Hi Alessandro,

> there isn't a correct answer. For sure lastest WebDAV flaws are covering
> this protocol by many doubts. On the other hand any FTP implementation
> could be discovered vulnerable in any time (usually when you already
> choosed and implemented it...).

    I agree with you. I wish to use WebDAV because it has some concurrence
control (ie file locking mechanism) wich save me from coding that, leaving
me with only the user interface stuff. But, as you have pointed, I'm a
little afraid that future flaws came up. Unfortunelly Miscrosoft Internet
products has a long history with that (for all, I have no intention to
engage in a flame). From my programmer point of view, WebDav will be better
for me.

    Could anyone from Microsoft comment the actual situation of the WebDAV
implementation?

> Did you considered using Windows IPsec filters to secure your personalized
> interface traffic (file transfer included)?

    Yes, but some workstation (server machines, to be true) has NAT wich
prevents the IPSec to work (AFAIK).

Thanks for the answer,

Eric.


Quantcast