cc_staff
1,486
edits
FTP server in the Cloud: Difference between revisions
Jump to navigation
Jump to search
→Better alternatives to FTP
No edit summary |
|||
| Line 8: | Line 8: | ||
; Anonymous FTP : | ; Anonymous FTP : | ||
:; Read | :; Read only access : Use HTTP, see [[Creating a Webserver on CC-Cloud]] | ||
:; Read/write: Providing anonymous write access to your server is a very bad idea. Anyone could upload a file, with the potential for it to be a malicious script or executable. | :; Read/write access: Providing anonymous write access to your server is a very bad idea. Anyone could upload a file, with the potential for it to be a malicious script or executable. | ||
; Authenticated FTP: If you are authenticating FTP users, a better and easier alternative is [[SFTP]].<br/>Another alternative is [https://en.wikipedia.org/wiki/FTPS FTPS], which is an extension of FTP which uses [https://en.wikipedia.org/wiki/Transport_Layer_Security TLS] to encrypt data sent and received. When authenticating users via passwords the transmitted data should be encrypted or else there is a possibility that an eavesdropper could discover the password. In addition it is generally a bad idea to allow password logins on your VM as there are often many automated brute-force password attempts made on any machine connected to the internet. Instead use ssh-key authentication (see [[SSH Keys]]). [[SFTP]] can be configured to use ssh-key authentication. | ; Authenticated FTP: If you are authenticating FTP users, a better and easier alternative is [[SFTP]].<br/>Another alternative is [https://en.wikipedia.org/wiki/FTPS FTPS], which is an extension of FTP which uses [https://en.wikipedia.org/wiki/Transport_Layer_Security TLS] to encrypt data sent and received. When authenticating users via passwords the transmitted data should be encrypted or else there is a possibility that an eavesdropper could discover the password. In addition it is generally a bad idea to allow password logins on your VM as there are often many automated brute-force password attempts made on any machine connected to the internet. Instead use ssh-key authentication (see [[SSH Keys]]). [[SFTP]] can be configured to use ssh-key authentication. | ||