FTP Hosting Tutorials

SFTP vs. FTP- If you can upload and download your files with FTP, you may think that’s all it holds for you. But knowing something more about various file transfer protocols, you may learn some useful information. Keep reading for more on SFTP vs FTP.

What Is FTP?

FTP stands for File Transfer Protocol. Like Kleenex®, it is a word that you may hear used generically as well as to denote a specific type of protocol, distinguished from others that include the letters F-T-P in their names. There are, in fact, three protocols FTP protocols that you should know about:

• FTP

• FTP with TLS/SSL, also called FTPs

• SFTP

If you take a close look at the FTP client you happen to use, you may find that they are present an available to you. Let’s look at each one in detail.

FTP

A mechanism for file transfer was first proposed in 1971 and implemented at MIT. The official specification for FTP got its start as an RFC (Request for Comments) of the Network Working Group of the IETF (Internet Engineering Task Force) in 1980.

FTP was designed to promote file sharing, remote computer access and use, to help users overcome differences in file storage systems, and to be an efficient and reliable means of data transfer. Specifically, FTP functionality was considered important as a means of uploading and downloading files, as well as deleting them; creating and deleting directories; and reviewing directory contents. Browsers often provide built-in FTP capability. While allowing for the possibility of being accessed by users, FTP was largely devised for access by programs.

FTP is part of the TCP/IP protocol suite (Transmission Control Protocol/Internet Protocol). (The TCP/IP protocol suite is defined in IETF RFC 959.) It provides security through login/password authorization, but the authentication is handled in clear-text, which is detectable with a sniffing tool. It is considered insecure. It also does not address directory listings with a uniform format, and has a secondary DATA connection.

FTPs

FTPs (FTP Secure), also known as FTP-SSL, is FTP undertaken using SSL (secure sockets layer) protocol and TLS (Transport Layer Security), a newer version of SSL. Unlike FTP, FTPs uses encryption in its connections. There are two common methods for establishing an FTPs connections. One is "AUTH TLS," which the RFC specification designates as preferable. "SSL connect" which is an older protocol. With FTPs, your FTP client is likely to give you a choice to enable encryption not only of your password but also of all your communication over the connection. Note, however, that not all servers support encrypted data transfer with FTPs. Those that do have a server’s certificate which is verified by your FTP client in the connection process. If the certificate is not signed by a trusted authority per your computer’s listing of trusted certificate authorities or has a certificate that has expired, your FTP client should notify you.

SFTP

SFTP is short for SSH File Transfer Protocol (Secure SHell), and despite the similarity in name, SFTP is a completely distinct protocol from FTP and FTPs. SSH is a protocol for secure login on a remote server and creates an encrypted connection session, now on Version 2, and SFTP is the file transfer protocol for this version, building on SCP (Secure Copy Protocol), the protocol for SSH 1.x. Like FTPs it protects both authentication information and data, and requires a server that supports it in order to work. Also, as with SFTP, you may need to make a selection or check a box to enable encryption of data as well as your password. SFTP differs from FTP connections in working better with firewalls and routers.

HostMonster

FatCow

GoDaddy