[Xitami] Xitami, FTP, and Security.

Michael diLorenzo xitami@lists.xitami.org
Wed, 19 May 2004 18:48:02 -0400


Hi Jerry,

I'm not sure exactly what type of security you're referring to.  The term 
"security" usually encompasses several different components.  One of these 
is validation, which Xitami provides in the form of username/password 
prompts.  This is the one of the simplest forms of validation.  Once you 
validate with a username and password, your connection is "trusted" by the 
server, and you can send and receive data (within your privledges).

If you want security "of the actual data being transmitted," you're 
probably looking for encryption.  I am not aware that Xitami provides 
encryption on the fly like that, although I am not an expert at this.  If 
Xitami were to encrypt data, it would have to be some sort of encryption 
that can be decrypted by a web browser, FTP client, or even a DOS 
session.  I am not aware of any type of "decryption" algorithm or process 
that occurs at, for example, a simple DOS prompt telnet session.

Perhaps I'm just not reading your question correctly.  If you know the 
username and password for an FTP server (any server), I'm not sure what 
other security could be provided "on the fly," and if it was, I'm not sure 
what kind of additional authentication process you'd have to go through in 
order to read the data.

Can you give an example of a feature on a different FTP server that does 
this?  Thanks!

Michael

On Wed, 19 May 2004 15:01:38 +0000, <jglong3@att.net> wrote:

> Hello  :) :)
>
>
> THANKS for your time, help, and advise.
>
> Started using the FTP portion of Xitami a few weeks ago and all is 
> working great.
>
> After reading the Xitami document and in the FTP portion it appears that 
> the use of Xitami FTP
> there is no method to establish SECURITY other than the noted USERNAME 
> and PASSWORD at the Xitami FTP SERVER. The normal use of the DOS Command 
> Line FTP and the use of FTP in the browser to copy also has no security 
> other than the Username and Password prompt.
>
> The following 2 questions are related to any security method with the 
> Xitami (v2.5b4) FTP Server of the data transmitted for USERNAME, 
> PASSWORD, and File Data.
>
>
>    1. Is there a method to secure the actual data being transmitted 
> using the Xitami Server?
>
>       I have found other providers of FTP CLIENT/SERVER processes that 
> provide this
>       protection. I am just curious if this can be done using Xitami.
>
>    2. Does the PRO version of Xitami cover this?
>
>
> Thanks, :) :)
>
> Jerry
>
>
> --
> Xitami Users Mailing List -- For Xitami support
> To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami



-- 
Using M2, Opera's revolutionary e-mail client: http://www.opera.com/m2/