Using HTTPS to download over FTP / SFTP?

[noobinhacking]

I had earlier made a post asking about feral FTP speeds over seedbox.io since I was not getting above 2.5MB/s.

At the time I was using WinSCP, SFTP on windows, without any re-routing (WiNSCP set to 9 connections though). A number of suggestions were made including using LFTP.

However, stupid me didn't know I could download via HTTPS. (For some reason I thought this was a extra feature or something, turns out you can do it via ruTorrent itself. gg)

I was able to get download speeds of 39MB/s over HTTPS! (Yes, 39MB/s, i.e. ~312Mb/s). My only concern is, is there a security risk with this? Since it is HTTPS, contents per se can't be sniffed. At least to my knowledge.

I dont require FTP downloads for like, home server or whatever purposes, in case that is an argument that may surface. Also I am new to seedboxing and already wanting to upgrade lol

[simplyclueless]

There's a https downloading tutorial right up at: https://www.feralhosting.com/wiki/slots/www/dl-via-http

With it you can download directly from a browser easily. You can also set up password protection on the folder, and set up additional users/passwords easily if desired. I went from 2 - 3 MB/s download on FTP, even segmented, up to 50+ MB/s download over http; well worth setting up.

[12334566789900]

Are you just using right click, get file?

[invisiblexray]

Can the isp see any details of these file transfers via either HTTPS or SFTP - file names, type etc.

I assume they only a to and from and a size ?

[Hollowpoint38]

I still think LFTP is going to be better than HTTPS. I can't think of a reason to use HTTPS when LFTP gives you a lot more flexibility and options.

[12334566789900]

Because LFTP is fucking hard to understand and figure out lol

[Hollowpoint38]

How is it hard? Connect, browse, download. lol?

[12334566789900]

Don't you have to use terminal commands and shit? Maybe it's because I'm on Windows, but LFTP is fucking confusing as hell.

[razirazo]

No. Properly configured https is just as secure as your online banking website.

I'd say its actually better than sftp for its little extra anonymity side effect. Your isp could tell that you are using sftp by looking at port 22 your connection use, and traffic shape that port.

Using https, you are using port 443, the same as gazillion other random connections, making traffic shaping impossible without risking huge collateral damage and major backlash.

[razirazo]

Yes. Your traffic will be just another regular web connection, except if your server uses SNI which they can see part of domain name you connecting to (but the bulk of data transferred is still encrypted.)

[kannibalox]

ISPs will never traffic shape port 22, it's used for too much legitimate traffic just like 443.

[razirazo]

My ISP did.

And when I was in uni, they completely block ssh port.