[Xitami] Xitami, FTP, and Security.
Magnus Wedberg
xitami@lists.xitami.org
Thu, 20 May 2004 12:09:53 +0200
> As far as there being
> security/encryption of the data being transferred, the FTP protocol
> does not offer that and was never designed to do so. If that is what
> you desire, I'd look into some of the "Blow Fish" encryption
> technologies. These programs are usually very inexpensive and do
> indeed provide some extreme security. A good suggestion would be to
> "Blow Fish" encrypt the files you put on your FTP site and give your
> user the "Blow Fish' decryption program and the password to enable
> them to extract your encrypted files.
This is good advice, but I wouldn't encrypt the files, I would
encrypt the connection using SSH or the like. I am in fact doing this
already, using the Zebedee Secure Tunnel program
http://www.winton.org.uk/zebedee/ and various free FTP servers
(chiefly WarFTPd and GuildFTPd). Zebedee both encrypts and compresses
the network traffic, including control commands, and can be
configured to act totally transparent to the user. It's an easy and
totally free way to set up a simple VPN, actually. I have customers
who have been running this for years with few complaints.
Such solutions can of course be used with Xitami, too, but to be
brutally honest -- the FTP part of Xitami is not good. Nothing to use
for anything resembling a "production environment", but somewhat
usable for just getting small files onto a web site, which of course
is the reason why it's there to begin with ;-)
To the OP:
1) No, not natively.
2) No.
--
Magnus Wedberg
http://www.magnuswedberg.com/
mw AT 9000.org
Warning! Objects in viewfinder may be closer than they appear.