En Sun, Nov 25, 2001 at 12:04:41PM +0800, Migs Paraz escribio:
#_ FTP is resistant to encrypting passwords since sFTP clients for
#_ Windows is hard to come by, and tunneling over SSH is clunky on
#_ Windows.  We need to cater to Windows users since this FTP is for
#_ updating websites in a hosting setup.
#_ 
#_ FTP as it is has sniffable passwords in the clear.
#_ 
#_ I thought of this:
#_ How about locking out the user's account until they are ready to FTP.
#_ Before they FTP, the user goes to a SSL protected site where they can
#_ retrieve a generated FTP session password.  This password will be
#_ used for FTP but will be disabled once the FTP session is finished.
#_ 
#_ This might break automated setups, though... or FTP from web
#_ publishing programs, perhaps?

How about stunnel (http://www.stunnel.org/)? Has anybody tried it
already?

Program that wraps normal socket connections with SSL/TLS

You might have it installed in your system already, check: 
rpm -qi stunnel

-- 
Juan Miguel Cacho               [EMAIL PROTECTED]
Para�aque City, Philippines
GnuPG Public Key                Key ID 7B071F7F
http://www.philonline.com/~chocovim/pancitmolo.pgp
  Drive safely. 90% of people are caused by accidents.
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]

To subscribe to the Linux Newbies' List: send "subscribe" in the body to 
[EMAIL PROTECTED]

Reply via email to