Always allow insecure plain FTP for this server? - Does nothing
Moderator: Project members
-
- 425 Can't open data connection
- Posts: 46
- Joined: 2013-07-30 14:45
- First name: nigel
- Last name: coldwell
Always allow insecure plain FTP for this server? - Does nothing
Do I need to delete and re-add the sever? Is it a bug?
Last edited by flagpole on 2019-07-17 15:01, edited 1 time in total.
Re: Always allow insecure plain FTP for this server? - Does nothing
It's a bug.
Probably for the better though, the more annoying plaintext FTP becomes, the faster people switch to FTP over TLS.
Probably for the better though, the more annoying plaintext FTP becomes, the faster people switch to FTP over TLS.
-
- 425 Can't open data connection
- Posts: 46
- Joined: 2013-07-30 14:45
- First name: nigel
- Last name: coldwell
Re: Always allow insecure plain FTP for this server? - Does nothing
Is it going to be fixed?
Like i say it's on my lan, it not externally facing anywhere.
Maybe it could be an undocumented feature requiring a manual edit of the xml file.
Like i say it's on my lan, it not externally facing anywhere.
Maybe it could be an undocumented feature requiring a manual edit of the xml file.
Re: Always allow insecure plain FTP for this server? - Does nothing
Even though the server is in your LAN, there's no reason not to enable TLS on it.
-
- 425 Can't open data connection
- Posts: 46
- Joined: 2013-07-30 14:45
- First name: nigel
- Last name: coldwell
Re: Always allow insecure plain FTP for this server? - Does nothing
It's a PVR. I can't enable TLS on it.
Re: Always allow insecure plain FTP for this server? - Does nothing
@botg: I'm with the users, here. There are simply cases where FTP over TLS cannot be enabled, even if desired. Not only in case of embedded things on read-only media, but also in the case of too weak hardware. TLS needs resources (CPU time and memory for encryption) and would slow down such devices (like PVR etc.) to a crawl.
I know that you are planning to do away with plain FTP, altogether, however, there should be exceptions (with warning):
1. LAN-only servers, to cover local embedded devices. Connection over public nets should be disallowed, OTOH.
2. Anonymous connections to public servers, to cover simple file downloads from public drop-off servers. Uploads and non-anonymous connections should be blocked, for the sake of security.
I know that you are planning to do away with plain FTP, altogether, however, there should be exceptions (with warning):
1. LAN-only servers, to cover local embedded devices. Connection over public nets should be disallowed, OTOH.
2. Anonymous connections to public servers, to cover simple file downloads from public drop-off servers. Uploads and non-anonymous connections should be blocked, for the sake of security.
No support requests over PM! You will NOT get any reply!!!
FTP connection problems? Please read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
FileZilla Pro support: https://customerforum.fileZilla-project.org
FTP connection problems? Please read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
FileZilla Pro support: https://customerforum.fileZilla-project.org
Re: Always allow insecure plain FTP for this server? - Does nothing
"Going to" only if you travel back in time. It was already fixed in the repository on the 5th of July.flagpole wrote:Is it going to be fixed?
What date has the vendor agreed upon by with it will release a firmware update adding TLS support?flagpole wrote:It's a PVR. I can't enable TLS on it.
You buy new hardware.boco wrote:in the case of too weak hardware.
Just a few KB of memory. And modern CPUs all have hardware acceleration for AES, even in the embedded world.boco wrote:TLS needs resources (CPU time and memory for encryption)
-
- 425 Can't open data connection
- Posts: 46
- Joined: 2013-07-30 14:45
- First name: nigel
- Last name: coldwell
Re: Always allow insecure plain FTP for this server? - Does nothing
You know the problem here. Lack of empathy. You can not imagine that anyone else's use case is differnt from yours.
What will happen if you disable support for legacy protcols? People will continue to use the old version which you will not be able to patch.
This reminds me of when you refused for years to to add any kind of encryption to the passwords stored in filezilla.
As for when the manufacturer plans to add support for TLS, they don't which I suspect you knew. You were making rhetorical point, the nature of which escapes me.
What will happen if you disable support for legacy protcols? People will continue to use the old version which you will not be able to patch.
This reminds me of when you refused for years to to add any kind of encryption to the passwords stored in filezilla.
As for when the manufacturer plans to add support for TLS, they don't which I suspect you knew. You were making rhetorical point, the nature of which escapes me.
Re: Always allow insecure plain FTP for this server? - Does nothing
My whole point is this: Don't be lazy, don't be cheap. Get hard- and software that is secure and configure it accordingly.
Re: Always allow insecure plain FTP for this server? - Does nothing
Obviously, we don't live in the same worlds.
No support requests over PM! You will NOT get any reply!!!
FTP connection problems? Please read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
FileZilla Pro support: https://customerforum.fileZilla-project.org
FTP connection problems? Please read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
FileZilla Pro support: https://customerforum.fileZilla-project.org
Re: Always allow insecure plain FTP for this server? - Does nothing
Are you forced by law to use outdated hard- or software?
Re: Always allow insecure plain FTP for this server? - Does nothing
No, just by wallet.
No support requests over PM! You will NOT get any reply!!!
FTP connection problems? Please read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
FileZilla Pro support: https://customerforum.fileZilla-project.org
FTP connection problems? Please read Network Configuration.
FileZilla connection test: https://filezilla-project.org/conntest.php
FileZilla Pro support: https://customerforum.fileZilla-project.org