Home All Groups Group Topic Archive Search About

Is Secure-Ftp ALWAYS = SSL-Ftp ? Other forms of encrypted FTP transfers ?

Author
10 Oct 2006 10:49 AM
Wolfgang Hercker
Is Secure-Ftp ALWAYS = SSL-Ftp ?

Or what are the differences ?

I want to perform encrypted ftp transfers.

Are there other methods of ftp transfers which offer encryption?

Wolfgang

Author
10 Oct 2006 11:20 AM
Sooner Al [MVP]
Secure Shell (SSH) File Transfer Protocol (SFTP) is one method... Here is a
free Windows SFTP client...

http://winscp.net/eng/index.php

Of course you need to be running a SSH server. Personally I recommend copSSH
as an easy to install and configure Windows SSH server package. copSSH is a
repackaging of OpenSSH/OpenSSL/cygwin and is updated as those packages are
updated...

http://theillustratednetwork.mvps.org/Ssh/SecureShell.html

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...

Show quoteHide quote
"Wolfgang Hercker" <w.herc***@hotmail.com> wrote in message
news:452b7aa6$0$21744$9b4e6d93@newsspool3.arcor-online.net...
> Is Secure-Ftp ALWAYS = SSL-Ftp ?
>
> Or what are the differences ?
>
> I want to perform encrypted ftp transfers.
>
> Are there other methods of ftp transfers which offer encryption?
>
> Wolfgang
>
Author
10 Oct 2006 3:44 PM
Sooner Al [MVP]
I forgot to add that XP has a built-in PPTP VPN server function that you
could use. Establish the VPN tunnel then transfer files to/from your
network. I am currently running a PPTP VPN server on my Vista RC2 box for
that purpose. You can also run Remote Desktop, or VNC for that matter,
through the tunnel if you wish...

http://www.onecomputerguy.com/networking/xp_vpn_server.htm
http://www.onecomputerguy.com/networking/xp_vpn.htm

--

Al Jarvi (MS-MVP Windows Networking)

Please post *ALL* questions and replies to the news group for the
mutual benefit of all of us...
The MS-MVP Program - http://mvp.support.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no
rights...

Show quoteHide quote
"Sooner Al [MVP]" <Soone***@somewhere.net.invalid> wrote in message
news:D46BCAD6-88EB-41A9-A296-ECA76F9D6DE0@microsoft.com...
> Secure Shell (SSH) File Transfer Protocol (SFTP) is one method... Here is
> a free Windows SFTP client...
>
> http://winscp.net/eng/index.php
>
> Of course you need to be running a SSH server. Personally I recommend
> copSSH as an easy to install and configure Windows SSH server package.
> copSSH is a repackaging of OpenSSH/OpenSSL/cygwin and is updated as those
> packages are updated...
>
> http://theillustratednetwork.mvps.org/Ssh/SecureShell.html
>
> --
>
> Al Jarvi (MS-MVP Windows Networking)
>
> Please post *ALL* questions and replies to the news group for the
> mutual benefit of all of us...
> The MS-MVP Program - http://mvp.support.microsoft.com
> This posting is provided "AS IS" with no warranties, and confers no
> rights...
>
> "Wolfgang Hercker" <w.herc***@hotmail.com> wrote in message
> news:452b7aa6$0$21744$9b4e6d93@newsspool3.arcor-online.net...
>> Is Secure-Ftp ALWAYS = SSL-Ftp ?
>>
>> Or what are the differences ?
>>
>> I want to perform encrypted ftp transfers.
>>
>> Are there other methods of ftp transfers which offer encryption?
>>
>> Wolfgang
>>
>
Author
10 Oct 2006 4:59 PM
Tauno Voipio
Wolfgang Hercker wrote:
> Is Secure-Ftp ALWAYS = SSL-Ftp ?
>
> Or what are the differences ?
>
> I want to perform encrypted ftp transfers.
>
> Are there other methods of ftp transfers which offer encryption?
>
> Wolfgang
>

The SSH package contains sftp and scp which are using
the encryption SSH is built for.

--

Tauno Voipio
tauno voipio (at) iki fi
Author
10 Oct 2006 8:14 PM
Chris Davies
Wolfgang Hercker <w.herc***@hotmail.com> wrote:
> Is Secure-Ftp ALWAYS = SSL-Ftp ?

It depends what you mean by each of those terms. I would say that neither
term is commonly recognised, so there's lots of scope for ambiguity.


> I want to perform encrypted ftp transfers.

I would recommend you use SFTP (secure file transfer over SSH). Linux
systems handle this as standard. Windows systems need a third-party
application; I've used WinSCP, and I know of other people using the
BitVise product.

Just to muddy the waters, unfortunately, some vendors (mainly in the
Windows world, I believe) offer secure file transfer by running the
entire FTP (you know, the stuff that runs over ports 21/20) over an
SSH session. Ipswitch is one company that certainly /used/ to do this -
it may still do.

Finally, there are a number of proprietary solutions, which offer native
support for things like interrupted file transfers, apparent atomic file
creation (i.e. the file's either there in its entirety or it isn't there
at all), and guaranteed delivery. I haven't used any of these but I'm
sure a search engine will help you find them.

Chris
Author
11 Oct 2006 7:43 AM
Ian
Author
11 Oct 2006 1:55 PM
Kurt
There's also ftps, which is ftp over ssl. It's not as secure as ssh, but
secure enough for most.

....kurt

Show quoteHide quote
"Chris Davies" <chris-use***@roaima.co.uk> wrote in message
news:2ibtv3-puh.ln1@news.roaima.co.uk...
> Wolfgang Hercker <w.herc***@hotmail.com> wrote:
>> Is Secure-Ftp ALWAYS = SSL-Ftp ?
>
> It depends what you mean by each of those terms. I would say that neither
> term is commonly recognised, so there's lots of scope for ambiguity.
>
>
>> I want to perform encrypted ftp transfers.
>
> I would recommend you use SFTP (secure file transfer over SSH). Linux
> systems handle this as standard. Windows systems need a third-party
> application; I've used WinSCP, and I know of other people using the
> BitVise product.
>
> Just to muddy the waters, unfortunately, some vendors (mainly in the
> Windows world, I believe) offer secure file transfer by running the
> entire FTP (you know, the stuff that runs over ports 21/20) over an
> SSH session. Ipswitch is one company that certainly /used/ to do this -
> it may still do.
>
> Finally, there are a number of proprietary solutions, which offer native
> support for things like interrupted file transfers, apparent atomic file
> creation (i.e. the file's either there in its entirety or it isn't there
> at all), and guaranteed delivery. I haven't used any of these but I'm
> sure a search engine will help you find them.
>
> Chris
Author
12 Oct 2006 9:28 AM
Chris Davies
In comp.os.linux.networking Kurt <lorentzenkurt@nospam.hotmail.com> wrote:
> There's also ftps, which is ftp over ssl. It's not as secure as ssh, but
> secure enough for most.

That's what I was describing in my second paragraph. (Just to add to
the complexity it didn't help that I misspelt SSL as SSH, though.)

Chris