Security

Ask something
Discussion Locked

Password encryption?

0 helpful
5 replies

by robinarm

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have my employers FTP site on our own web server (IIS4 & MS Proxy2). Our clients need to upload data files to this site and I'm using NTFS permissions to provide security on the FTP site (I've disallowed anonymous access). I'm a bit concerned thatthe user names and passwords could be "sniffed" by crackers. Using MS Proxy2 what would be the most straight forward (or best) way to protect the account details on the Internet side. We intend that our customers will be using DOS command line ftp sessions to transfer the files using a normally available ISP.

5 replies

by turambar386

Hi. There is no way to make FTP itself more secure. FTP transmits user names and passwords in clear text, period.

If you are concerned that sniffed user names and passwords could be used to gain access to your network (beyond the FTP server), it would probably be best just to ensure that your users have very limited access.

Your only other option is to encrypt the entire session.

This discussion is closed to new replies.