Originally posted by: Thor86
Originally posted by: ViRGE
Smart FTP uses SSL FTP. SFTP is using SSH to encrypt the FTP connection.
You learn something new everyday.
SSL is not encryption of the FTP connection?
It is, but it's a different kind of encryption. SFTP simply encypts everything by channeling everything through the SSH tunnel, whereas SSL FTP can encrypt everything(or just the commands) using SSL/TLS certificates from the server. The former is basically "free" on any *nix machine; if you have an FTP server and the account gets SSH access, it can be done. The downside is that it's difficult to implement on a non-*nix machine since SSH isn't native. As for SSL, it not only benefits from having the option to only encrypt the commands, but it can be "more" secure since you can go by signed SSL certs. The downside is that it requires a seperate port in some cases due to explicit mode, but for a true implementation, requires a server to be written with it in mind. FTP-SSL FTP wrappers exist, but they're both expensive, and lack the ability to completely control SSL FTP. At the moment, with *nix's popularity, if you see an encrypted server, it's usually SFTP.