FTPS Secure Authentication

FTPS Secure Authentication

Is Authentication Secure over FTPS connections?

Question

Is the Authentication process always secure (encrypted) when using FTPS connections? 

Answer

No. Explicit FTPS connection may expose the authentication process. 

With Explicit SSL the Client must send the AUTH command to the server to tell the server to drop into secure mode. If the Client sends the AUTH command before it sends the USER/PASS command, then yes, the authentication will be secured. However, if the Client sends the USER/PASS command before sending the AUTH command, then the authentication will not be secured.

However, Implicit FTPS connections always secure the authentication process. 

Steps

  1. If using FTPS connections, strongly consider using Implicit TLS.




    • Related Articles

    • FTP or FTPS Connection Fails

      FTP or FTPS Connection Failing or Listing as Empty Contents Question Using WebDrive, my FTP(S) connection is failing. What should I do? Answer Below are some items to test to try to resolve a failed FTP or FTPS connection.  Steps Verify the URL/IP ...

    • FTPS or WebDAV Server Certificate Verification

      When connecting to an FTPS or WebDAV Server for the first time, or periodically afterwards, a prompt may appear before connect that details the server's certificate information and an option of whether to accept or cancel (deny). If you have any ...

    • Encryption

      Does WebDrive Support Encryption? Question Does WebDrive support encryption for connections and transfers? Answer Yes. WebDrive supports TLS 1.3, TLS 1.2, TLS 1.1, and TLS 1.0 for FTPS and HTTPS connections (as well as various cloud services). SFTP ...

    • 2019: Does WebDrive support or allow Two Factor Authentication (2FA)?

      WebDrive supports two factor authentication (2FA) when coupled with Cornerstone (server solution) and using Safenet etokens.  https://southrivertech.com/wp-content/uploads/qs_WebDrive_eTokens.pdf

    • Getting Started: Connecting to an FTP Server

      Click the “+” Icon and select the “FTP” option Connection Name: Enter the name you would like to give your connection. You can name this as you choose, or accept the default name Server Address: Enter the URL (ftp.ftpsite.com) or IP Address ...