Secure FTP connections


About Secure FTP
The File Transfer Protocol (FTP) uses commands that are sent in cleartext and non coded file transfers that can be intercepted through monitoring of local and wide-area networks. By offering secure FTP Session where commands as well as file transfers can be encrypted, IglooFTP PRO can prevent such interception. IglooFTP PRO supports the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols, and is currently the only FTP Client to support the Stanford SRP protocol.
NOTE: Because secure connections require that both the client and the server be identified, and because FXP sessions need to establish a second connection between the server and an other server (that can't be identified), it's actually impossible to offer secure FXP sessions.

SSL/TSL secure connections
The SSL protocol is the security protocol currently employed to provide security over the web. This is exactly the same security protocol that IglooFTP PRO uses to secure your FTP Session. When you connect to an SSL enabled FTP server, this server will send you a certificate that identify it.You will then be offered the choice to accept or reject this certificate. You can also add this certificate into the IglooFTP PRO trusted certificates directory, so it will be automatically accepted each time you connect to this server. Even if it is not usual, you may also be requested to identify yourself by sending a client certificate (IglooFTP PRO allow you to create such certificate).
To use SSL/TSL secure FTP Sessions, set the Commands/Transfers Encryption protocol to TLSv1 with SSLv2 and SSLv3 support or TLSv1 with SSLv2 support in the Preferences dialog box.

SRP secure FTP connections
Developed in 1997, SRP is a strong password authentication protocol that has become widely adopted in a variety of Open Source and commercial products. SRP does not expose passwords to either passive or active network intruders, and it stores passwords as a one-way hash on the server. SRP does not use certificates but a key computed at connection time by both the server and the client. Based on your username and your password, but also on random data that will vary on each new connection, this key is then used to encrypt all FTP commands and all file transfers between the FTP server and IglooFTP PRO.
More detailed information about SRP are available at the The Stanford SRP Authentication Project home site
To use SRP secure FTP Sessions, set the Commands/Transfers Encryption protocol to Stanford SRP authentication system in the Preferences dialog box.







Help Index