FTP Servers and Security - Three methods that Secure FTP Servers use
By John Johnson
FTP (File Transfer Protocol) has been the basis for file transfer since the dawn of the internet. The truly remarkable feature about FTP was that it was operating system independent. Files could be smoothly transferred between Unix, Windows and any other operating system. The other cool feature about FTP was that a simple validation mechanism consisting of a username and a password could be used to limit access to files. However, the actual data itself was transferred unencrypted and it was easy to intercept and listen in on an FTP connection.
The internet itself had very negligible security built into it. Consisting of many smaller independent networks that stretched across the globe, the path that a data packet took to get from point A to point B was unpredictable. With the popularity of the internet, it became essential to be able to transmit many types of critical data with some amount of security. Netscape Communications solved the security problem on the internet by developing the Secure Sockets Layer Protocol (SSL) which used public key cryptography to encrypt data transmitted over the internet. This is still the most widely used security mechanism and is implemented by all web browsers.
FTPS Secure File Transfer
Modifications to the FTP protocol were released to incorporate the use of SSL for encrypting file transfers over the internet. The modified mechanism is referred to as FTPS. In order to maintain backwards compatibility with the original file transfer protocol, an FTPS connection could either be explicit, where the connection between the client connection and the server starts out as regular FTP and then negotiates a secure connection, or implicit where the connection starts out being encrypted.
HTTPS Secure File Transfer
Since a web browser is already capable of public key cryptography, simple downloads and uploads can be performed directly through a web browser using the HTTPS protocol. This means that special FTP Client software is not required.
SFTP Secure File Transfer
The Secure Shell protocol also known as SSH was developed by Tatu Ylonen to enable secure access to remote shells using public key cryptography and replace Telnet and other non secure shells. This protocol has since evolved to also support a file transfer mechanism known as SFTP. The main advantage of this mechanism is that it did not require the opening of an additional data channel connection for transferring files.
All of these three methods of secure file transfer are based on public key cryptography and all of them are equally capable of securing the transfer of critical files across the internet. The only drawback of these methods is that there is a data overhead associated with encrypting files. There is also a performance overhead associated with encrypting the files at the source and decrypting them at the destination. Because of this, system administrators sometimes use regular FTP for file transfers within a secured internal network. However, for transferring files over the internet, this is a small price to pay in exchange for the guarantee that sensitive files reach their destination without being intercepted or tampered with.
About the author
Okay, you now know about the three types of secure ftp servers. If you are looking for a secure FTP server to run on your windows system that can support all three secure file transfer mechanisms, be sure to visit http://www.sysax.com/ and download Sysax FTP Server from http://www.FreeArticlesAndContent.com
|
|
Copy This Article
For FREE!!!
You can use this article and copy it on your own website
for free! All you have to do is make sure the article
is copied with no changes and includes the "About
The Author" text. Also please ensure that all url's
are hyperlinked according. Thank you. |
Link To This Article - And We'll
Link Back To Your Website!
You are more then welcome to link to this article! All
you have to do is copy this webpage address from the
address bar and create a link on your website. Please
use the title of this article for your link text. Please
get in contact once you have linked to this article
and we'll link back to you! Thank you. |
|
|
|
Other great articles from this category...
|
Related Sites
|
|
