I am uploading a site to two domains: one the “real” one and one that I’m using to test (I know that I can test in the browser on my machine, but I’m doing a lot of testing in Windows, too, plus there are additional reasons for the two domains).
My question is, do I have to change the information in the Upload panel every time I upload to a different domain? Is it possible to use both ftp and ftps and have each set for a different domain? And, now that I think of it, what’s the difference between ftp and ftps? I mean I see that the “s” stands for secure, but what’s that actually mean for uploading from FWPro?
I’m not sure if you can have more than one set of credentials – try
it and report back! As to your other question,
On Jan 4, 2011, at 3:59 AM, Martin Rice wrote:
And, now that I think of it, what’s the difference between ftp and
ftps? I mean I see that the “s” stands for secure, but what’s that
actually mean for uploading from FWPro?
There are several different “flavors” of secure FTP. I’m not entirely
sure which one Freeway uses, but because of the way it’s architected,
I’m pretty sure it could use any of them. One is simply to wrap a ssh
(secure shell) “tunnel” around regular FTP. The traffic is encrypted
by secure shell, so no passwords or data pass in clear text. Another
is to use the scp (secure copy) protocol, which is a part of ssh. That
doesn’t actually use FTP at all. Yet another is an extension of FTP to
use SSL (Secure Sockets Layer) inside of regular FTP to encrypt
control and transport streams. Any of these secure options require the
explicit cooperation of your server, and there is a negotiation phase
where your Mac asks that server if it speaks that dialect of file
transfer. A mismatch at that level would stop the whole thing from
working.
In any case, regular FTP is completely insecure, because the username,
password, and packets travel entirely in the clear, as plain text. The
only thing protecting you from attack along this vector is the sheer
enormity of the Internet, and a lack of motivation the part of your
would-be intruders.
Some of the hosting providers I use won’t even enable “normal” FTP
even if you ask nicely, because they are concerned about this problem.
And I would feel slightly worried about a host that didn’t offer
secure transport as an option – it’s a sign that they don’t care
enough about their work (or yours).
Thanks for the great information about ftp. It was really enlightening for me.
I’ll make an attempt to set up two sets of credentials and then report back.
Thanks,
Martin
On Jan 4, 2011, at 8:42 AM, Walter Lee Davis wrote:
I’m not sure if you can have more than one set of credentials – try it and report back! As to your other question,
On Jan 4, 2011, at 3:59 AM, Martin Rice wrote:
And, now that I think of it, what’s the difference between ftp and ftps? I mean I see that the “s” stands for secure, but what’s that actually mean for uploading from FWPro?
There are several different “flavors” of secure FTP. I’m not entirely sure which one Freeway uses, but because of the way it’s architected, I’m pretty sure it could use any of them. One is simply to wrap a ssh (secure shell) “tunnel” around regular FTP. The traffic is encrypted by secure shell, so no passwords or data pass in clear text. Another is to use the scp (secure copy) protocol, which is a part of ssh. That doesn’t actually use FTP at all. Yet another is an extension of FTP to use SSL (Secure Sockets Layer) inside of regular FTP to encrypt control and transport streams. Any of these secure options require the explicit cooperation of your server, and there is a negotiation phase where your Mac asks that server if it speaks that dialect of file transfer. A mismatch at that level would stop the whole thing from working.
In any case, regular FTP is completely insecure, because the username, password, and packets travel entirely in the clear, as plain text. The only thing protecting you from attack along this vector is the sheer enormity of the Internet, and a lack of motivation the part of your would-be intruders.
Some of the hosting providers I use won’t even enable “normal” FTP even if you ask nicely, because they are concerned about this problem. And I would feel slightly worried about a host that didn’t offer secure transport as an option – it’s a sign that they don’t care enough about their work (or yours).
Well, Walter, it seems as though you can’t have more than one set of credentials. I just tried it. If I have all the fields filled in, say, for ftp and then switch to ftps the credential fields stay the same. Then, if I fill them in with different information and upload and then switch back to ftp, the last entered information is there, too.
Thanks,
Martin
On Jan 4, 2011, at 8:42 AM, Walter Lee Davis wrote:
I’m not sure if you can have more than one set of credentials – try it and report back! As to your other question,
Well, Walter, it seems as though you can’t have more than one set of credentials. I just tried it. If I have all the fields filled in, say, for ftp and then switch to ftps the credential fields stay the same. Then, if I fill them in with different information and upload and then switch back to ftp, the last entered information is there, too.
Thanks,
Martin
On Jan 4, 2011, at 8:42 AM, Walter Lee Davis wrote:
I’m not sure if you can have more than one set of credentials – try it and report back! As to your other question,