Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What are the security risks in passing passwords in ftp URLs. For instance internet explorer takes in a url of the form

  1. Is the url transmitted in plain text?
  2. Can a man in the middle (or proxy server) view the request and see the password?
  3. Are there more secure ways/clients that encrypts the password across the wire?
share|improve this question
up vote 2 down vote accepted
  1. Yes
  2. Yes
  3. Yes. Almost all other ways are more secure
    Check out sftp and scp
share|improve this answer
Indeed. Yes, Yes and Yes. And as a fourth point: FTP is bloody annoying on the network. Workarounds (passive mode or a FTP aware firewall) are almost always needed. – Hennes Jul 21 '12 at 14:35
Can you recommend any web hosting company that provides sftp or equivalent? – adentum Jul 21 '12 at 19:48
@adentum - All honourable web hosts with shell/root access should already provide this, if not change web host. – Nifle Jul 21 '12 at 21:35

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .