FTPS Secure Authentication
Is Authentication Secure over FTPS connections?
Question
Is the Authentication process always secure (encrypted) when using FTPS connections?
Answer
No. Explicit FTPS connection may expose the authentication process.
With Explicit SSL the Client must send the AUTH command to the server to tell the server to drop into secure mode. If the Client sends the AUTH command before it sends the USER/PASS command, then yes, the authentication will be secured. However, if the Client sends the USER/PASS command before sending the AUTH command, then the authentication will not be secured.
However, Implicit FTPS connections always secure the authentication process.
Steps
If using FTPS connections, strongly consider using Implicit TLS.
Related Articles
FTP or FTPS Connection Fails
FTP or FTPS Connection Failing or Listing as Empty Contents Question Using WebDrive, my FTP(S) connection is failing. What should I do? Answer Below are some items to test to try to resolve a failed FTP or FTPS connection. Steps Verify the URL/IP ...
FTPS or WebDAV Server Certificate Verification
When connecting to an FTPS or WebDAV Server for the first time, or periodically afterwards, a prompt may appear before connect that details the server's certificate information and an option of whether to accept or cancel (deny). If you have any ...
Encryption
Does WebDrive Support Encryption? Question Does WebDrive support encryption for connections and transfers? Answer Yes. WebDrive supports TLS 1.3, TLS 1.2, TLS 1.1, and TLS 1.0 for FTPS and HTTPS connections (as well as various cloud services). SFTP ...
2019: Does WebDrive support or allow Two Factor Authentication (2FA)?
WebDrive supports two factor authentication (2FA) when coupled with Cornerstone (server solution) and using Safenet etokens. https://southrivertech.com/wp-content/uploads/qs_WebDrive_eTokens.pdf
Getting Started: Connecting to an FTP Server
Click the “+” Icon and select the “FTP” option Connection Name: Enter the name you would like to give your connection. You can name this as you choose, or accept the default name Server Address: Enter the URL (ftp.ftpsite.com) or IP Address ...