3 ms·
I used to agree with this, but with how easy it is to run MITM attacks these days I think there is a pretty compelling argument for removing plaintext FTP. I do
by tomc1985 5y ago
I used to agree with this, but with how easy it is to run MITM attacks these days I think there is a pretty compelling argument for removing plaintext FTP. I don't think FTPS should go, but tbh I don't think I have ever encountered an FTPS server in-the-wild.
It's one thing to have your password stolen, but another thing entirely to have your download and its shasum/md5sum/whatever sidecar file replaced in-flight