On 2014-03-25 Tue 18:34 PM |, Theo de Raadt wrote: > > The 5.5 release will support FTP releases, but after that we are > disabling FTP and thus pushing people to use HTTP installs. > > In this day and age, it is somewhat irresponsible for us to put > people into a situation where they might install new FTP servers on > the internet. We've known it is a dangerous protocol for over 20 > years. Use a HTTP server to serve the sets, please. >
Would these pages summarise it? http://cr.yp.to/ftp/security.html http://tools.ietf.org/html/rfc2577 http://en.wikipedia.org/wiki/File_Transfer_Protocol#Security http://daniel.haxx.se/docs/ftp-vs-http.html
