3 ms·

I would make an important note on FTP: it’s not a secure protocol. The last time I cared about FTP, the recommendation was to move toward SFTP or FTPS for produ

I would make an important note on FTP: it’s not a secure protocol. The last time I cared about FTP, the recommendation was to move toward SFTP or FTPS for production/public environments for this reason.

robertlagrant 5y ago
It's 100% not secure. I don't know much about FTPs, but I think I only trust sftp.
- anthony_romeo 5y ago
  My understanding is that FTP/FTPS is analogous to HTTP/HTTPS but I left FTP for ssh long ago and never looked back.
  - 123pie123 5y ago
    correct, SFTP uses FTP over SSH
    - tialaramex 5y ago
      No. This is completely wrong in two different ways First: The parent was talking about FTPS, which is the FTP protocol spoken over TLS, similar to how HTTPS can be HTTP/1.1 spoken over TLS Second: SFTP is not FTPS, and it also isn't FTP spoken over SSH. Instead. SFTP is a protocol specifically for SSH which, like FTP, is concerned with file transfers, but matches what its authors actually wanted from file transfers in the modern era, rather the concerns FTP had decades ago.
      - 123pie123 5y ago
        not sure I fully understand your comment, I said correct as my first statement agreeing with the parent and thus your explaination (ie FTPS is FTP over TLS) at what point did I mention that FTPS is SFTP?? my comment regarding SFTP was in reference to the parents comment >but I left FTP for ssh long ago and never looked back. but you're correct that >SFTP is a protocol specifically for SSH
        kevin_thibedeau 5y ago
        SFTP does not use FTP. It is an independent design.
        mpyne 5y ago
        > at what point did I mention that FTPS is SFTP?? I had also understood your comment to mean that SFTP is "just FTP tunneled through SSH" (i.e. FTPS) rather than a redesigned protocol.
        123pie123 5y ago
        bad habit of mine to explain SFTP to non technical people. at a million mile high level
        robertlagrant 5y ago
        What nontechnical people?
chasil 5y ago
It is not only insecure, but not specific enough on several aspects of the protocol, leading to implementation problems. It also doesn't do any error correction beyond TCP. It is quite fast, however, compared to SFTP/SSH. http://mywiki.wooledge.org/FtpMustDie http://mywiki.wooledge.org/FtpMustDie

robertlagrant 5y ago

It's 100% not secure. I don't know much about FTPs, but I think I only trust sftp.

anthony_romeo 5y ago
My understanding is that FTP/FTPS is analogous to HTTP/HTTPS but I left FTP for ssh long ago and never looked back.
- 123pie123 5y ago
  correct, SFTP uses FTP over SSH
  - tialaramex 5y ago
    No. This is completely wrong in two different ways First: The parent was talking about FTPS, which is the FTP protocol spoken over TLS, similar to how HTTPS can be HTTP/1.1 spoken over TLS Second: SFTP is not FTPS, and it also isn't FTP spoken over SSH. Instead. SFTP is a protocol specifically for SSH which, like FTP, is concerned with file transfers, but matches what its authors actually wanted from file transfers in the modern era, rather the concerns FTP had decades ago.
    - 123pie123 5y ago
      not sure I fully understand your comment, I said correct as my first statement agreeing with the parent and thus your explaination (ie FTPS is FTP over TLS) at what point did I mention that FTPS is SFTP?? my comment regarding SFTP was in reference to the parents comment >but I left FTP for ssh long ago and never looked back. but you're correct that >SFTP is a protocol specifically for SSH
      - kevin_thibedeau 5y ago
        SFTP does not use FTP. It is an independent design.
      - mpyne 5y ago
        > at what point did I mention that FTPS is SFTP?? I had also understood your comment to mean that SFTP is "just FTP tunneled through SSH" (i.e. FTPS) rather than a redesigned protocol.
        123pie123 5y ago
        bad habit of mine to explain SFTP to non technical people. at a million mile high level
        robertlagrant 5y ago
        What nontechnical people?

chasil 5y ago

It is not only insecure, but not specific enough on several aspects of the protocol, leading to implementation problems. It also doesn't do any error correction beyond TCP. It is quite fast, however, compared to SFTP/SSH. http://mywiki.wooledge.org/FtpMustDie http://mywiki.wooledge.org/FtpMustDie