[unisog] Ftp access to Web servers

Steve Bernard sbernard at gmu.edu
Tue Jun 11 14:59:14 GMT 2002


Tom,

Good suggestions. I thought of suggesting `stunnel` and FTP or WebDAV but,
wanted to give the simplest solutions. The complexities and overhead of
digital certificates still make some shy away.

The PuTTY clients (SSH2, SCP, SFTP) are good stuff too,
http://www.chiark.greenend.org.uk/~sgtatham/putty/

Steve


-----Original Message-----
From: Tom Perrine [mailto:tep at SDSC.EDU]
Sent: Monday, June 10, 2002 4:52 PM
To: sbernard at gmu.edu
Cc: unisog at sans.org
Subject: Re: [unisog] Ftp access to Web servers


>>>>> On Mon, 10 Jun 2002 16:06:51 -0400, "Steve Bernard" <sbernard at gmu.edu>
said:

    Steve> Assuming that access of some sort will have to be provided, I
would try to
    Steve> steer things towards either an HTTPS/SSL protected web portal
that allows
    Steve> users to edit their web space or require the use of SSH2/SFTP for
file
    Steve> transfers. Both of these provide encryption as well as a variety
of
    Steve> authentication methods.

    Steve> Steve

Or, you can use FTP over SSL, with the SecureFTP client (free, Java,
portable).  We use an ssl wrapper with an FTP server, and the Java
client for lots of stuff.  Has the "advantage" of only encrypting the
command channel, no the data channel, which is good for our users, who
think that pushing around a Terabyte or two should be instantaneous
:-)

http://secureftp.sdsc.edu

I guess the "real" answer will (someday) be WebDAV over SSL, since all
the web authoring stuff seems to be heading towards DAV, but most of
the clients seem to think that passwords are an interesting idea that
should be shared with the world as often as possible...

--
Tom E. Perrine <tep at SDSC.EDU> | San Diego Supercomputer Center
http://www.sdsc.edu/~tep/     |




More information about the unisog mailing list