WebApp Sec mailing list archives

RE: Secure FTP


From: "Scott, Richard" <Richard.Scott () BestBuy com>
Date: Wed, 14 Jan 2004 13:06:14 -0600

As far as I know - generic port forwarding does not encrypt the data
channel, but it can be configured such that the Data channel is
forwarded through the SSH tunnel.  The only exception to this would be
if the SSH server were not to be on the same physcial machine as an FTP
server.

Assume this is correct, comments?

Cheers,
R.

<Cut>
FTP through ssh is only able to secure the control channel and does not
protect the data channel.
Better methods of file transfer over ssh are sftp, scp or rsync. If you
want to use the FTP protocol and need it secure look at TLS FTP
<Snip>


Current thread: