http server vs ftp server

[watts3000]

Which one of these methods are better for data storage a http server or a ftp server. Basically which one has better performance and which one can be secured better. I have noticed that a lot of people use a http server thats running off of iis and using integrated authentication.

 

[FUBAR]

If you're planning on doing anything on IIS, besure you have the patch cluster du jour or prepare to have your box turned to swiss cheese.

Personally, for a file store, I would use ftp. With http you have to have the security on the server set up, then you also have to worry about the browser's security. Ex. Mozilla, IE, and probably a bunch more save passwords. If you go to some cluster (pure guess that you're at a university here) or someone you gave access to clicks the save password button, you just lost whatever security you had set up, even if it's 24 bit encryption, or 2billion bit.

Ftp it's (almost) all in the server. Just make sure you don't run an anonymous or use wu-ftp on a *nix. There's plenty of other issues but that's my .05 (inflation dontcha know)

 

[n0cmonkey]

sFTP is your friend. I personally use scp for all my file transfers, unless I have several gigs of transfers then ftp on my internal lan is good enough. If you want to allow anonymous access both http and ftp are fine.

 

[watts3000]

How do you prevent the browser capturing the passwords.

 

[n0cmonkey]

<< How do you prevent the browser capturing the passwords. >>



Ask the users nicely

 

[Scarpozzi]

FTP would be easier since most http setups don't allow file transfers to the server...

I would try getting a good FTP server program and if you decide to use IIS as your server, check microsoft's site every day for patches...

 

[lorlabnew]

I use proftpd under SuSE 7.3; default configuration won't allow anonymous access. You can further tweak access rights, and it's fairly fast.

 

[Bleep]

Tagging along on this thread, can you run a bulletin board on a ftp server?
Bleep

 

[n0cmonkey]

<< Tagging along on this thread, can you run a bulletin board on a ftp server?
Bleep >>



Yeah, but it wouldnt be worth the time or effort.

 

[Bleep]

n0cmonkey:

Thanks I have been wondering about it for some time.
Bleep

 

[n0cmonkey]

<< n0cmonkey:

Thanks I have been wondering about it for some time.
Bleep >>



Just a couple of reasons it wouldnt be worth it:
1. it would be hard to browse
2. administration would be a PIA to say the least