FTP security ?

[Moonark]

is there a way to get 128-bit encryption on an IIS ftp site with the use of a certificate sort of like HTTPS? Being that passwords are sent in plain text, and I don't want anon. access, I was looking for a way to secure my ftp site.

 

[n0cmonkey]

sFTP servers exist if you dont mind using a different FTP daemon.

 

[Moonark]

are there any that run on Win32? and if so can they get NT usernames and passwords for authentication

 

[n0cmonkey]

No clue. Google it and see what happens

 

[Need4Speed]

yes there are some that will use NT authentication like IIS. WS_FTP comes to mind, it uses SSL encryption. Also you may want to look into Vshell, which is a SSH2 FTP server.

Bear in mind though that encryption will slow down your transfers. it may be a good idea to just encrypt the control port and not the data port, that way your passwords stay safe but yous till get good transfer rates. Also, all clients will need to use a compatible SSH2 client rather than a standard ftp client like bulletproof or cute.

Cuteftp is also working on a SSL Ftp server.

-P