3 ms·

Password sent in the clear.

• ars 11y ago
  FTP is quite often anonymous with no password. And you can use SFTP (secure FTP, not to be confused with SSH file transfer). It's much better than HTTP if you need entire directories. There isn't really any better protocol for giving public access to entire directories.
  • zokier 11y ago
    > And you can use SFTP (secure FTP, not to be confused with SSH file transfer). Do you mean FTPS?
    • ars 11y ago
      I do.
• jedisct1 11y ago
  FTP-over-TLS has been around for a long time, and is widely supported by clients and servers. But it's a really nasty hack, that introduces a lot of other issues.
  • kjs3 11y ago
    You mean FTP/S aka RFC4217? You ain't kidding about being a nasty hack. When it recently came up in my world, the only place it seemed to be really well supported was in the AS/400 world, where IBM seems to have standardized on it. Everywhere else there seemed to be any number of weirdnesses, incompatibilities and decrepit features. YMMV.