On Gwe, 2003-06-27 at 18:47, Adam Thornton wrote: > On Fri, 2003-06-27 at 12:33, Wolfe, Gordon W wrote: > > There are a few cases when you have to use ftp instead of scp. Like transferring > > files to and from an VM/CMS system. ssh is not implemented on VM, more's the pity. > > Use sf/UFT with IP-based filtering. At least then you're not passing > cleartext passwords everywhere.
Its still very insecure in most networks, you are now dependant upon your entire network area between the client and server box being secure, meaning every box that is directly on that network (including notionally seperated by switches) Cleartext is bad, it only takes one windows trojan with a password sniffer
