[Xitami] Xitami, FTP, and Security.

Magnus Wedberg xitami@lists.xitami.org
Thu, 20 May 2004 12:09:53 +0200


> As far as there being
> security/encryption of the data being transferred, the FTP protocol
> does not offer that and was never designed to do so. If that is what
> you desire, I'd look into some of the "Blow Fish" encryption
> technologies. These programs are usually very inexpensive and do
> indeed provide some extreme security. A good suggestion would be to
> "Blow Fish" encrypt the files you put on your FTP site and give your
> user the "Blow Fish' decryption program and the password to enable
> them to extract your encrypted files.

This is good advice, but I wouldn't encrypt the files, I would 
encrypt the connection using SSH or the like. I am in fact doing this 
already, using the Zebedee Secure Tunnel program 
http://www.winton.org.uk/zebedee/ and various free FTP servers 
(chiefly WarFTPd and GuildFTPd). Zebedee both encrypts and compresses 
the network traffic, including control commands, and can be 
configured to act totally transparent to the user. It's an easy and 
totally free way to set up a simple VPN, actually. I have customers 
who have been running this for years with few complaints.

Such solutions can of course be used with Xitami, too, but to be 
brutally honest -- the FTP part of Xitami is not good. Nothing to use 
for anything resembling a "production environment", but somewhat 
usable for just getting small files onto a web site, which of course 
is the reason why it's there to begin with ;-)

To the OP:
1) No, not natively.
2) No. 
 
-- 
Magnus Wedberg
http://www.magnuswedberg.com/
mw AT 9000.org
Warning! Objects in viewfinder may be closer than they appear.