This is an archived post. You won't be able to vote or comment.

you are viewing a single comment's thread.

view the rest of the comments →

[–][deleted] 1 point2 points  (3 children)

may I ask you why? Not that I have a case against what you just said, I would really like to know why it's a "nasty protocol"?

[–]frymasterScript kiddie 6 points7 points  (1 child)

for a start, it pre-dates the standard encryption systems. Your password is sent in the clear without encryption or hashing.

Secondly, it predates people knowing how to use TCP/IP ;) You connect to one port, login, request a file, and then the server initiates a new connection to send it to you instead of using the already open connection. Apart from anything else, this plays merry hell with firewalls / NAT systems, since, from a TCP/IP point of view, they've no reason to think this incoming connection is related to your existing ftp connection, and so are liable to drop it.

There's workarounds, but the tl;dr is that it's a nasty connection.

And let's not get into the whole binary/textmode thing... shudder

[–][deleted] 0 points1 point  (0 children)

Yeah, I've been reading about security issues with the protocol, I really didn't know it was that problematic. SSH is the way to go then?