PDA

View Full Version : 'PROT C' command


JensB
02-01-2002, 03:13 PM
"SSL for data channel can be turned off by 'PROT C' command (supported by CuteFTP Pro v2) so FXP can be possible"

quote from Raiden FTPD:s msg board ...

Will this be supported by flashfxp too ?

PS. quote -> http://www.tranceambient.com/ubb/cgi-bin/ultimatebb.cgi?ubb=get_topic;f=13;t=003076 DS.

MxxCon
02-01-2002, 07:25 PM
that doesn't apply to FlashFXP becuase it doesn't handle SSL connections (yet?)

JensB
02-01-2002, 07:44 PM
I know it doesn´t handle em yet ...

Just wanted to let the Author know of this recent development ....

S3cur1ty
02-02-2002, 06:27 AM
this maybe useful for flashfxp

when connecting to a real ssl ftp server such as GSFTPS , it's impossible for flashfxp to connecto to it in SSL for both command and data connections , unless the server is running non-ssl mode and you prepare for a SSL server bouncer that wraps both command/data connections into SSL .

but with this PROT C command , you can use any single TCP connection proxy/bouncer with SSL to connect to the GSFTPS , and then immediatelly sends a PROT C command and then just use non-ssl mode for data connections

bigstar
02-02-2002, 08:56 AM
hmmm, I thought the whole idea behind ssl was to protect the data?

S3cur1ty
02-02-2002, 11:26 AM
protecting the data is nice but there are some disadvantages

... transfer speed is slow (with SSL)
... transfer data size grows
... can not fxp ( unless other server is an implict ssl server as well)

so since the password / commands are protected , sometimes it's nice to transfer data in clear channel the data is not important at all .

JensB
02-02-2002, 02:23 PM
afaik u can´t fxp even if other server is an implict ssl server ..since there is no standard for a threepart ssl connection ...