3 ms·
That is not what Mozilla is claiming: > The biggest security risk is that FTP transfers data in cleartext, allowing attackers to steal, spoof and even modify t
by II2II 5y ago
That is not what Mozilla is claiming:
> The biggest security risk is that FTP transfers data in cleartext, allowing attackers to steal, spoof and even modify the data transmitted.
I don't know how realistic that type of attack is and compromised authentication is likely worse, but both are cases that Mozilla cannot fix since they are inherent to the protocol itself.
- tyingq 5y agoI guess, but they aren't deprecating http downloads, which have the same problem as anonymous ftp.
- II2II 5y agoFor the majority of people, the lack of FTP support would go unnoticed so it is easy to depreciate and remove. I wouldn't be surprised if the same happens to HTTP (in general) once a certain threshold has been reached for HTTPS. I also wouldn't be surprised if they start adding warnings about insecure transfer methods for particular file types at a much earlier date.