FTP vrs. Secure Shell

[kenny]

How exactly is a secure shell connection more secure the a FTP connection? Why do they say its bad to leave FTP open?

[Brown Bear]

Originally posted by kenny
Why do they say its bad to leave FTP open?

Hackers.

[kenny]

Originally posted by Brown Bear


Hackers.

I know that much, I just dont understand why they can hack a FTP connection but not a secure shell connection

[iwantchixx]

if you dont know what teh difference is maybe you shouldnt be using the internet

[TrafficTeam]

well...

just take a sniffer,hang it on to your box and connect to your FTP...


then do the same and connect to your shell...


then you know whats the deal...



Rgds,JOKER

[foe]

SSH all the way FTP sends all passwords via a unsecured textfile, SSH passwords

[faytl]

Everything between an SSH Client -> SSH Server is encrypted...
Everything between an FTP Client -> FTP Server is not...

There are secure versions of the FTP protocol around though...

[Juge]

Does anyone here have the problem (or solution) to CuteFTP pro sending text files as binary over SSH2?

[AcidMax]

Juge is there an option for auto-detect the type before sending or anything? Most FTP programs will have something to detect Binary vs Ascii, but I have never used Cute FTP.

Andy

[Video-Post]

So what about website passwords? For example when you log into your admin area with your browser...is the login/password sent in plain text as well?

[Brown Bear]

Originally posted by Video-Post
So what about website passwords? For example when you log into your admin area with your browser...is the login/password sent in plain text as well?

Good question....anybody know the answer?

[woj]

Originally posted by Video-Post
So what about website passwords? For example when you log into your admin area with your browser...is the login/password sent in plain text as well?

Unless your admin area is on a secure server (URL starts with https://) then it's sent as plain text as well.