|
Home > Archive > IIS Server Security > July 2004 > Secure Password
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
|
|
| Ricardo 2004-06-30, 6:01 pm |
| I have a IIS 5.0 with a FTP site.
When users connect to the FTP site is required a password to gain access to the folders.
But I know that this user password is sent in clear text to the server. Is there a way to encrypt it to improve secure on my FTP site ?
| |
| Jonathan Maltz [MS-MVP] 2004-06-30, 8:52 pm |
| Nope - that's the nature of FTP.
There's a "SFTP" but IIS' FTP service doesn't support it, and, if I recall
correctly, it's actually a different protocol than FTP but hold a similar
name
--
--Jonathan Maltz [Microsoft MVP - Windows Server, Virtual PC]
http://www.visualwin.com - A Windows Server 2003 visual, step-by-step
tutorial site :-)
http://vpc.visualwin.com - Does <insert OS name> work on VPC 2004? Find out
here
Only reply by newsgroup. I do not do technical support via email. Any
emails I have not authorized are deleted before I see them.
"Ricardo" <Ricardo@discussions.microsoft.com> wrote in message
news:B9BC53E7-DE7E-4F11-B63A-0FFC46B1A0A1@microsoft.com...
> I have a IIS 5.0 with a FTP site.
> When users connect to the FTP site is required a password to gain access
to the folders.
> But I know that this user password is sent in clear text to the server. Is
there a way to encrypt it to improve secure on my FTP site ?
| |
| Alun Jones [MSFT] 2004-07-01, 5:57 pm |
| "Jonathan Maltz [MS-MVP]" <jmaltz@mvps.org> wrote in message
news:OT0h3WwXEHA.3716@TK2MSFTNGP10.phx.gbl...
> Nope - that's the nature of FTP.
By the strict definition that "FTP is what is defined in RFC 959". There
are other documents that extend FTP to provide security in various different
forms.
> There's a "SFTP" but IIS' FTP service doesn't support it, and, if I recall
> correctly, it's actually a different protocol than FTP but hold a similar
> name
Yes, SFTP is a completely different protocol - I don't know why the SSH
protocol designers chose to use a name that is going to cause this sort of
confusion. FTPS, on the other hand, is FTP with SSL capabilities added.
There are a large number of third-party solutions for FTPS, including
clients, servers and proxies, that would allow you to run your own choice of
FTP client or server with encryption of commands and data traffic.
Alun.
~~~~
|
|
|
|
|