File Transfer Protocols

File Transfer Protocols

1. FTP

   • FTP is a popular file transfer method that has been around for much longer than www, and has not changed much since its inception. Back then, internet activity was assumed to be non-malicious, so FTP was not built with the functionality to deal with the computer security threats we are currently facing. Data exchanges in FTP use two separate channels known as the command channel and the data channel. With FTP, both channels are not encrypted, which makes any data sent through these channels vulnerable to being intercepted and read.

2. SFTP

   • provides two methods for authenticating connections. As with FTP, you can simply use a user ID or password. However, with SFTP these credentials are encrypted, which provides a greater security advantage than FTP. The other authentication method that you can use with SFTP is SSH keys. This includes first generating a private and a public SSH key. Then you send your public SSH key to your trading partner and they upload it to their server and associate it with your account. When they connect to your SFTP server, their client software will transmit their public key to the server for authentication. If the public key matches your private key, along with any username or password provided, then the authentication will be successful. User ID authentication can be used with any authentication key and / or password combination.

3. File transfer is the transmission of a computer file through a communication channel from one system to another. Normally, file transfer is mediated by a communications protocol.

4. DIFFERENCE

   • One of the main differences between FTPS and SFTP is that FTPS uses multiple port numbers. The first port, for the command channel, is used for authentication and pass-through commands.

Bilder und Dateien der Mindmap