Question about upload security

[Jacques]

Can someone tell me if prior to an upload (or refresh) phase the ftp login and password are sent to the server crypted or in uncrypted ?

[Nadeem]

Hi Jacque,

I don't fully understand what you mean. When Actinic commuicates with the server, it communicates via ftp protocol. Therefore it will open a connection to your ftp server, the server ask for the username, which Actinic supplys, then it asks for the password, again Actinic supplys this. Its just the same as you opening CuteFTP and connect to your server.

Kind Regards

[Jacques]

Hello Nadeem,

Thanks for the reply.

I was thinking about security issues with ftp.
With standard ftp (or with softwares such as Cute Ftp) the ftp login and password are not crypted and could therefore be read by someone intercepting the information.

That's why I use SSH softwares when I transfer some files (other than the actinic ones) to my site. With SSH softwares your login and password are crypted. Someone intercepting the information would therefore not be able to read anything useful.

Best regards

Jacques

[zmagyar]

We have already considered this security issue at development. But that time most of the ISPs did not provide sftp access in their packages. Therefore we dropped this bacause the effort/benefit ratio was low (it could affect only the minority of the users). Nowadays the world goes paranoid so this may be reconsidered in the near future.

Regards,

[Jacques]

Thanks for the feedback Zoltan