The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

SFTP vs Other methods

Discussion in 'General Discussion' started by iLLuSi0nS, Sep 12, 2008.

  1. iLLuSi0nS

    iLLuSi0nS Active Member

    Jun 9, 2007
    Likes Received:
    Trophy Points:
    I cannot connect to my server via SFTP because of firewall restrictions,
    how insecure is regular FTP? If someone was sniffing port 21 would they be able to intercept my information very easily (mostly my user and pass)?

    How do you guys connect to your server when using Dreamweaver?
    Anyone use cpanels "Web Disk" aka "Local/Network" or webdav?
  2. sparek-3

    sparek-3 Well-Known Member

    Aug 10, 2002
    Likes Received:
    Trophy Points:
    cPanel Access Level:
    Root Administrator
    Somebody else might have better knowledge of this than me.

    I use FTP over explicit TLS (I believe that is the setting in FileZilla). This encrypts the login section of FTP, but does not encrypt the actual data.

    This is generally good enough, though I guess it depends on what you are uploading. If you are uploading just plain HTML documents, then there's really no advantage to uploading it over unencrypted means because HTML that is accessible on the web can be read by anyone anyway.

    In my opinion, and this is straying off-topic a little, I think a new FTP or FTP-like standard needs to be written for secure transfers. I'm not sure what the answer is. SFTP is nice, don't get me wrong, but I just think it is wrong to depend on an application that has to piggy-back on another application (SSH). This isn't a cPanel problem, its more of an industry problem that I believe needs to be addressed.
  3. chirpy

    chirpy Well-Known Member

    Jun 15, 2002
    Likes Received:
    Trophy Points:
    Go on, have a guess
    I agree. It's a pretty major restriction for FTP.

    If you're connecting from a static IP address, you could always whitelist it in your firewall to allow the connections through for FTP over SSL/TLS.

    Just a note: SFTP is FTP over SSH; FTPS is FTP over SSL/TLS - different protocols and access methods ;)

Share This Page