I have a IIS 5.0 with a FTP site.
When users connect to the FTP site is required a password to gain access to 
the folders.
But I know that this user password is sent in clear text to the server. Is t
here a way to encrypt it to improve secure on my FTP site ?

[ Post a follow-up to this message ]

Nope - that's the nature of FTP.

There's a "SFTP" but IIS' FTP service doesn't support it, and, if I recall
correctly, it's actually a different protocol than FTP but hold a similar
name

--
--Jonathan Maltz [Microsoft MVP - Windows Server, Virtual PC]
http://www.visualwin.com - A Windows Server 2003 visual, step-by-step
tutorial site :-)
http://vpc.visualwin.com - Does <insert OS name> work on VPC 2004?  Find out
here
Only reply by newsgroup.  I do not do technical support via email.  Any
emails I have not authorized are deleted before I see them.


"Ricardo" <Ricardo@discussions.microsoft.com> wrote in message
news:B9BC53E7-DE7E-4F11-B63A-0FFC46B1A0A1@microsoft.com...
> I have a IIS 5.0 with a FTP site.
> When users connect to the FTP site is required a password to gain access
to the folders.
> But I know that this user password is sent in clear text to the server. Is
there a way to encrypt it to improve secure on my FTP site ?

[ Post a follow-up to this message ]

"Jonathan Maltz [MS-MVP]" <jmaltz@mvps.org> wrote in message
news:OT0h3WwXEHA.3716@TK2MSFTNGP10.phx.gbl...
> Nope - that's the nature of FTP.

By the strict definition that "FTP is what is defined in RFC 959".  There
are other documents that extend FTP to provide security in various different
forms.

> There's a "SFTP" but IIS' FTP service doesn't support it, and, if I recall
> correctly, it's actually a different protocol than FTP but hold a similar
> name

Yes, SFTP is a completely different protocol - I don't know why the SSH
protocol designers chose to use a name that is going to cause this sort of
confusion.  FTPS, on the other hand, is FTP with SSL capabilities added.
There are a large number of third-party solutions for FTPS, including
clients, servers and proxies, that would allow you to run your own choice of
FTP client or server with encryption of commands and data traffic.

Alun.
~~~~

[ Post a follow-up to this message ]