RE: ftp vs. webdav

From: Yogita Manghnani [MSFT] (yonlinemanghn_at_online.microsoft.com)
Date: 02/28/04


Date: Sat, 28 Feb 2004 00:59:46 GMT

Blake,
I would say Webdav can be more secure than FTP- because you can encrypt the
user credentials and the content by using SSL. Also, Webdav uses standard
ports like 80 and 443. You will need to obtain a certificate (either from a
local CA or from a vendor like Verisign, etc). Here are some links that
give more information:
http://support.microsoft.com/default.aspx?scid=kb;en-us;323470
http://support.microsoft.com/default.aspx?scid=kb;en-us;290625
I don't have any information regarding Performance- I guess that would
depend on how many other websites you have running on the server and what
kind of load your server can handle.

Hope this helps!
Thanks,
Yogita Manghnani
Microsoft Developer Support
Internet Information Server

*********************************************************************
>>Please do not send email directly to this alias. This is an online
account name for newsgroup participation only.<<

This posting is provided "AS IS" with no warranties, and confers no rights.
You assume all risk for your use.

© 2003 Microsoft Corporation. All rights reserved.
*********************************************************************



Relevant Pages

  • [NT] Vulnerability in WebDAV XML Message Handler DoS (MS04-030)
    ... Get your security news from a reliable source. ... send a specially crafted WebDAV request to a server that is running IIS ... Mitigating Factors for WebDAV Vulnerability ...
    (Securiteam)
  • Re: WebDAV disabled!
    ... but the Web Service Extension named WebDAV is nothing to do with OWA - ... that extension enables WebDAV on the entire server, ... Look at the properties of the Microsoft Exchange Server ...
    (microsoft.public.exchange.admin)
  • Re: URLScan Logs
    ... I'm not a webdav expert, ... > Front Page server extensions are not configured for the> site. ... I have been experimenting with locking down this> IIS server and have the latest patches on it and have> followed many of the procedures outlined in several guides> including "From Blueprint to Fortress: A Guide to> Securing IIS 5.0". ... > contains disallowed header 'translate:' Request will be> rejected. ...
    (microsoft.public.inetserver.iis.security)
  • Re: WebDAV disabled!
    ... I think you'll find that WebDAV is Prohibited by default. ... WebDAV service extension is enabled in Exchange Server 2003, ... The Extension named Microsoft Exchange Server is the one that enables ...
    (microsoft.public.exchange.admin)
  • RE: Webdav Authentication
    ... credentials with your app server. ... I'm curious what you would be trying to do with WebDAV where you WOULDN'T ... | We have an application that communicates with Exchange via webdav. ... | having to store the credentials on our appserver. ...
    (microsoft.public.exchange.development)