
20 Mar
2020
20 Mar
'20
11:58 a.m.
On Fri, 20 Mar 2020 08:50:57 +1300, Peter Reutemann quoted:
'"FTP is an insecure protocol and there are no reasons to prefer it over HTTPS for downloading resources'
True that. HTTPS is fine for unauthenticated downloads, and you can even use it for authenticated ones if you want. Alternatively, there’s SFTP, part of SSH, for doing secure, authenticated uploads and downloads. There was a thing called FTP-over-SSL/TLS. It was extremely fiddly and troublesome to set up. I never want to see it again.