Question & Answer
Question
Secure Shell FTP (SFTP)
Answer
Secure Shell FTP (SFTP)
The SSH File Transfer Protocol (SFTP) is a network protocol that uses Secure Shell (SSH) to transfer files. SSH uses public-key cryptography to authenticate the remote computer and allow the remote computer to authenticate the user if necessary. Unlike standard FTP it encrypts both commands and data preventing passwords and sensitive information from being transmitted in the clear over the network. The entire login session including the transmission of the password is encrypted making it much more difficult for an outsider to observe and collect passwords. By encrypting all traffic SFTP effectively eliminates eavesdropping connection hijacking and other network-level attacks.
SFTP is not simply FTP run over SSH; SFTP is a new protocol. It is functionally similar to FTP but because it uses a different protocol you cannot use a standard FTP client to talk to an SFTP server nor can you connect to an FTP server with a client that supports only SFTP.
Was this topic helpful?
Document Information
Modified date:
08 December 2018
UID
ibm10758903