FTPES entire session encryption?

[bla1515]

I would like to know if Filezilla encryptes the full session when using FTPES.

For example, WinSCP says "In Explicit Mode, the client has full control over what areas of the connection are to be encrypted. Enabling and disabling of encryption for the FTPS control channel and FTPS data channel can occur at any time. WinSCP though requests encryption for both control and data channel unconditionally during whole session."

What is the status for Filezilla?

If it doesn't encrypt the full session, is it possilbe to encrypt it by changing Filezilla configuration somewhere?

Thanks.

[boco]

FileZilla always tries to enable full encryption by sending PROT P, which enables data channel encryption. You should keep an eye on the server response to PROT P. If it's something like this:

14:28:04 Command: PROT P
14:28:04 Response: 200 PROT Command OK. Using Private data connection

then your session will be fully encrypted. If, however, you get an error response (rare, but may happen), full encryption is not established/guaranteed.

In Explicit Mode, the client has full control over what areas of the connection are to be encrypted.

I would like to add something to this phrase: The client has full control over what areas are encrypted if the server supports it. Servers can be set to not support data channel encryption, to support both, or even to force PROT P.