[ale] Secure FTP?

[Jonathan Rickman]

On Wed, 25 Jul 2001 djinn at djinnspace.com wrote:

> So how do I avoid clear text authentication?  :)

Approach #1 -- SSL
==================
SERVER SIDE
NAME: SSLftpd
SOURCE: ftp://ftp.psy.uq.oz.au:/pub/Crypto/SSLapps/

CLIENT SIDE
NAME: Secure FTP
SOURCE: http://www.glub.com/products/secureftp/

Approach #2 -- S/KEY
====================
Google is your friend...but beware, s/key is a pain.

Approach #3 -- VPN
==================
http://freeswan.org/ - Not the best approach, but it works.

You might also try http://www.cs.berkeley.edu/~smcpeak/SafeTP/

I haven't tried it, but then again, I'd just use plain old ProFTP and change the
passwords alot.

-- 
Jonathan Rickman
X Corps Security
http://www.xcorps.net


--
To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in message body.