io 1.0 will support secure site to site transfers. Because of known (?) security issue in current implementation, I never bothered to implement it. Also notice that PASSIVE mode SSL transfers are also vulnerable. Always prefer to use ACTIVE mode when possible. This applies to all daemons, and all implementations. Certificate based authentication on both control channel and data channel is a MUST for secure passive mode transfers.
|