Deprecating ftpd in the FreeBSD base system?

Steve Kargl sgk at troutmask.apl.washington.edu
Thu Sep 17 17:07:38 UTC 2020


On Thu, Sep 17, 2020 at 09:01:57AM -0600, Ian Lepore wrote:
> On Thu, 2020-09-17 at 18:43 +0400, Gleb Popov wrote:
> > On Thu, Sep 17, 2020 at 6:05 PM Cy Schubert <
> > Cy.Schubert at cschubert.com>
> > wrote:
> > 
> > > I've been advocating removing FTP (and HTTP) from libfetch as well.
> > > People
> > > should be using HTTPS only.
> > > 
> > 
> > Isn't this a bit too much? I often find myself in need to download
> > something starting with "http://" or "ftp://" and use fetch for this.
> > 
> 
> Indeed, we have products which rely on this ability in libfetch and we
> have to keep supporting them for many many years to come.
> 
> I hate it when someone imperiously declares [For security reasons]
> "People should/shouldn't be using ______".  You have no idea what the
> context is, and thus no ability to declare what should or shouldn't be
> used in that context.  For example, two embedded systems talking to
> each other over a point to point link within a sealed device are not
> concerned about man in the middle attacks or other modern internet
> threats.
> 

+1

My small FreeBSD-based HPC cluster is deattached from the internet.

-- 
Steve


More information about the freebsd-current mailing list