FTPS Server?

[Karl Denninger]

On 1/5/2012 7:38 AM, Matthew Seaman wrote:
> On 05/01/2012 12:47, Karl Denninger wrote:
>> Not SFTP (which is supported by the sshd) but FTPS.... is it supported
>> by FreeBSD?
> No, not supported in the base system.
>
>> This question may belong on the ports list, but a quick perusal there
>> didn't find anything particularly interesting (one possible candidate is
>> marked broken)
> Several of the ftp daemons in the ports should be capable of running
> FTPS.  10 seconds with Google turns up HOWTOs for setting up either
> vsftpd or proftpd to provide FTPS support.
>
> However, personally, I'd avoid FTPS.  It suffers from most of the design
> flaws of standard FTP[*], particularly as regards passing through
> firewalls.  Worse, because the traffic is encrypted, you can't even use
> tools like ftp-proxy (in ports as ftp/ftp-proxy) to extract transient
> port numbers by deep packet inspection.  As far as your users are
> concerned, just use SFTP.  It behaves exactly like an ordinary FTP
> client, but the underlying SSH protocol over the network is way, way
> better designed.
>
> 	Cheers,
>
> 	Matthew
>
> [*] Miserable, archaic and long overdue to be put out of our misery.
Yes, I understand all the arguments against, but I have an EyeFi card
here (SD card with a built in Wifi transmitter for use in cameras) that
does not know how to deal with SFTP.

So if I want to do anything other than transfer to a Windows machine
(barf!) I am stuck with either FTP (no encryption at all and subject to
be picked off via trivial means while the data is in flight) or FTPS
(which has its own set of issues.)

The ability to immediately get images shot in the field out of the
camera and onto stable storage via a Wifi hotspot running on the phone
in my pocket looks really good, but I'll be damned if I'm going to base
that on a Windows machine.

I understand that ftps bites but....

-- Karl