|
|
21-05-2008, 10:51 AM
|
#1 |
|
Guest
Posts: n/a
|
FTP Security Question
Every place I read about publishing a web with EW, they warn that passwords
and User IDs are transmitted unencrypted. The FTP log-in screen generated by windows suggests using a secure HTTP login instead of the FTP login. Does anyone know how to do this? Or have some other method of logging onto the host server that is secure? How great is the danger of just using the regular FTP login? Has anyone actually lost control of their website because of the FTP password transmission or is it just another unlikely possibility? -- Cordially, JCH www.jcharper.net |
|
|
22-05-2008, 03:07 AM
|
#2 |
|
Guest
Posts: n/a
|
Re: FTP Security Question
by using the FrontPage server extensions you hide the password.
if you want truly "secret" transfers you could try FrontPage publishing under https://sitename There is also SFTP but I haven't played with it in any way. HTH -- Chris Leeds Contact: http://chrisleeds.com/contact Have you seen ContentSeed (www.contentseed.com)? NOTE: This message was posted from an unmonitored email account. This is an unfortunate necessity due to high volumes of spam sent to email addresses in public newsgroups. Sorry for any inconvenience. "JCH" <JCH@discussions.microsoft.com> wrote in message news:F59E742F-8520-4096-B146-9E1A570036B9@microsoft.com... > Every place I read about publishing a web with EW, they warn that > passwords > and User IDs are transmitted unencrypted. The FTP log-in screen generated > by > windows suggests using a secure HTTP login instead of the FTP login. > > Does anyone know how to do this? Or have some other method of logging onto > the host server that is secure? > > How great is the danger of just using the regular FTP login? Has anyone > actually lost control of their website because of the FTP password > transmission or is it just another unlikely possibility? > -- > Cordially, > JCH > www.jcharper.net > |
|
|
|
22-05-2008, 05:00 AM
|
#3 |
|
Guest
Posts: n/a
|
Re: FTP Security Question
Expression Web doesn't support sftp yet. Maybe next version either sftp or
ftps will be supported. -- Cheryl D Wise MS MVP Expression Author: Foundations of Microsoft Expression Web "Chris Leeds, MVP - FrontPage" <NewsGroups@ChrisLeeds.com> wrote in message news:%23o$JMs3uIHA.3780@TK2MSFTNGP03.phx.gbl... > by using the FrontPage server extensions you hide the password. > if you want truly "secret" transfers you could try FrontPage publishing > under https://sitename > There is also SFTP but I haven't played with it in any way. > |
|
|
|
22-05-2008, 05:54 AM
|
#4 |
|
Guest
Posts: n/a
|
Re: FTP Security Question
If FP extensions weren't obsolete and no longer supported by my hosting
service, I would still be using FP. I didn't embark on this learning adventure willingly - MS made me do it. Do you have any best guess about how risky it is to send the ID and Password in the open as a practicval matter? Is the risk real or just something that could happen but doesn't? -- Cordially, JCH "Chris Leeds, MVP - FrontPage" wrote: > by using the FrontPage server extensions you hide the password. > if you want truly "secret" transfers you could try FrontPage publishing > under https://sitename > There is also SFTP but I haven't played with it in any way. > > HTH > > -- > Chris Leeds > Contact: http://chrisleeds.com/contact > Have you seen ContentSeed (www.contentseed.com)? > NOTE: > This message was posted from an unmonitored email account. > This is an unfortunate necessity due to high volumes of spam sent to email > addresses in public newsgroups. > Sorry for any inconvenience. > "JCH" <JCH@discussions.microsoft.com> wrote in message > news:F59E742F-8520-4096-B146-9E1A570036B9@microsoft.com... > > Every place I read about publishing a web with EW, they warn that > > passwords > > and User IDs are transmitted unencrypted. The FTP log-in screen generated > > by > > windows suggests using a secure HTTP login instead of the FTP login. > > > > Does anyone know how to do this? Or have some other method of logging onto > > the host server that is secure? > > > > How great is the danger of just using the regular FTP login? Has anyone > > actually lost control of their website because of the FTP password > > transmission or is it just another unlikely possibility? > > -- > > Cordially, > > JCH > > www.jcharper.net > > > > > |
|
|
|
22-05-2008, 06:52 AM
|
#5 |
|
Guest
Posts: n/a
|
Re: FTP Security Question
I don't have any statistics but I would image is it is pretty rare since
they have to either a) intercept your stream sending the userid/password or b) have a keylogger on your system. If they have a keylogger you have a bigger problem. -- Cheryl D Wise MS MVP Expression Author: Foundations of Microsoft Expression Web "JCH" <JCH@discussions.microsoft.com> wrote in message news:A71AA6B6-C742-4753-BC25-A530FF14A163@microsoft.com... > If FP extensions weren't obsolete and no longer supported by my hosting > service, I would still be using FP. I didn't embark on this learning > adventure willingly - MS made me do it. > > Do you have any best guess about how risky it is to send the ID and > Password > in the open as a practicval matter? Is the risk real or just something > that > could happen but doesn't? |
|
|
|
24-05-2008, 04:58 AM
|
#6 |
|
Guest
Posts: n/a
|
Re: FTP Security Question
I meant more as a general solution.
-- Chris Leeds Contact: http://chrisleeds.com/contact Have you seen ContentSeed (www.contentseed.com)? NOTE: This message was posted from an unmonitored email account. This is an unfortunate necessity due to high volumes of spam sent to email addresses in public newsgroups. Sorry for any inconvenience. "Cheryl D Wise" <nomail@wiserways.com> wrote in message news:OL6XK34uIHA.4492@TK2MSFTNGP02.phx.gbl... > Expression Web doesn't support sftp yet. Maybe next version either sftp or > ftps will be supported. > > -- > Cheryl D Wise > MS MVP Expression > Author: Foundations of Microsoft Expression Web > > > "Chris Leeds, MVP - FrontPage" <NewsGroups@ChrisLeeds.com> wrote in > message news:%23o$JMs3uIHA.3780@TK2MSFTNGP03.phx.gbl... >> by using the FrontPage server extensions you hide the password. >> if you want truly "secret" transfers you could try FrontPage publishing >> under https://sitename >> There is also SFTP but I haven't played with it in any way. >> > |
|
|
|
24-05-2008, 04:58 AM
|
#7 |
|
Guest
Posts: n/a
|
Re: FTP Security Question
There's no reason that your hosting company should pull the extensions.
contact me in the link below. I'm thinking of setting up a dedicated server with FrontPage extensions and NEVER remove or discontinue them. I wonder if enough people would be interested to make it worth the couple of hundred a month a dedicated server would cost me. -- Chris Leeds Contact: http://chrisleeds.com/contact Have you seen ContentSeed (www.contentseed.com)? NOTE: This message was posted from an unmonitored email account. This is an unfortunate necessity due to high volumes of spam sent to email addresses in public newsgroups. Sorry for any inconvenience. "JCH" <JCH@discussions.microsoft.com> wrote in message news:A71AA6B6-C742-4753-BC25-A530FF14A163@microsoft.com... > If FP extensions weren't obsolete and no longer supported by my hosting > service, I would still be using FP. I didn't embark on this learning > adventure willingly - MS made me do it. > > Do you have any best guess about how risky it is to send the ID and > Password > in the open as a practicval matter? Is the risk real or just something > that > could happen but doesn't? > -- > Cordially, > JCH > > > "Chris Leeds, MVP - FrontPage" wrote: > >> by using the FrontPage server extensions you hide the password. >> if you want truly "secret" transfers you could try FrontPage publishing >> under https://sitename >> There is also SFTP but I haven't played with it in any way. >> >> HTH >> >> -- >> Chris Leeds >> Contact: http://chrisleeds.com/contact >> Have you seen ContentSeed (www.contentseed.com)? >> NOTE: >> This message was posted from an unmonitored email account. >> This is an unfortunate necessity due to high volumes of spam sent to >> addresses in public newsgroups. >> Sorry for any inconvenience. >> "JCH" <JCH@discussions.microsoft.com> wrote in message >> news:F59E742F-8520-4096-B146-9E1A570036B9@microsoft.com... >> > Every place I read about publishing a web with EW, they warn that >> > passwords >> > and User IDs are transmitted unencrypted. The FTP log-in screen >> > generated >> > by >> > windows suggests using a secure HTTP login instead of the FTP login. >> > >> > Does anyone know how to do this? Or have some other method of logging >> > onto >> > the host server that is secure? >> > >> > How great is the danger of just using the regular FTP login? Has anyone >> > actually lost control of their website because of the FTP password >> > transmission or is it just another unlikely possibility? >> > -- >> > Cordially, >> > JCH >> > www.jcharper.net >> > >> >> >> |
|
|
|
24-05-2008, 04:59 AM
|
#8 |
|
Guest
Posts: n/a
|
Re: FTP Security Question
I believe Thomas Brundt - FP MVP offers FPSE hosting.
-- Cheryl D Wise MS MVP Expression Author: Foundations of Microsoft Expression Web "Chris Leeds, MVP - FrontPage" <NewsGroups@ChrisLeeds.com> wrote in message news:O76RRyRvIHA.1328@TK2MSFTNGP03.phx.gbl... > There's no reason that your hosting company should pull the extensions. > contact me in the link below. I'm thinking of setting up a dedicated > server with FrontPage extensions and NEVER remove or discontinue them. > I wonder if enough people would be interested to make it worth the couple > of hundred a month a dedicated server would cost me. > |
|
|
 |
| Thread Tools | |
| Display Modes | |
|
|
Linear Mode
