Ftp Servers and Security – Three Methods That Secure Ftp Servers Use

August 6, 2010 by admin  
Filed under Unix Server

FTP (File Transfer Protocol) has been the standard for file transfer since the early days of the internet. The most remarkable feature about FTP was that it was independent of the operating system. Files could be seamlessly transferred between Unix, Windows and any other operating system. The other neat feature about FTP was that a simple authentication mechanism consisting of a login name and a password could be used to restrict access to files. However, the actual data itself was transferred in plain text and it was easy to monitor and listen in on an FTP connection.

The internet itself had very negligible security built into it. Consisting of many smaller independent networks that stretched across the globe, the path that a packet of information took to get from point A to point B was unpredictable. With the widespread adoption of the internet, it became essential to be able to send many types of sensitive data with some amount of security. Netscape Communications solved the security problem on the internet by creating the Secure Sockets Layer Protocol (SSL) which used public key cryptography to encrypt data transmitted over the internet. This is still the preferred security mechanism and is implemented by all web browsers.

FTPS Encrypted File Transfer
Modifications to the FTP protocol were released to incorporate the use of SSL for encrypting file transfers over the internet. The modified mechanism is referred to as FTPS. In order to maintain backwards compatibility with FTP, an FTPS connection could either be explicit, where the connection between the client connection and the server starts out as regular FTP and then negotiates a secure connection, or implicit where the connection starts out being encrypted.

HTTPS Encrypted File Transfer
Since a web browser is already capable of encrypting data using SSL, simple downloads and uploads can be performed directly from a web browser using the HTTPS protocol. This means that special FTP Client software is not needed.

SFTP Encrypted File Transfer
The Secure Shell protocol also known as SSH was developed by Tatu Ylonen to enable secure access to remote shells using public key cryptography and replace Telnet and other insecure shells. This protocol has since evolved to also support a file transfer mechanism known as SFTP. The main advantage of this mechanism is that it did not require the opening of a second data channel connection for transferring files.

All of these three methods of secure file transfer are based on public key cryptography and all of them are equally capable of securing the transfer of sensitive files across the internet. The only drawback of these methods is that there is a data increase associated with encrypting files. There is also a performance overhead associated with encrypting the files at the source and decrypting them at the destination. Because of this, system administrators sometimes use regular FTP for file transfers within a secured internal network. However, for transferring files over the internet, this is a small price to pay in exchange for the peace of mind that sensitive files reach their destination without being intercepted or tampered with.

Three Key Timesaving Secrets for an Easy and Ideal Web Hosting

August 2, 2010 by admin  
Filed under Web Hosting Basic

Similar to all other technologies there is also no lack of difficulties and troubles in the field of dedicated web hosting. Although, there are certain things which one can adopt to prepare himself/herself for any server downtime or any sort of problems that might arise. Secret however lie in the fact that the user must be aware.

The points in the form of timesaving tips will definitely help the user to choose a dedicated web hosting along with saving an ample of time. These points or suggestions are given below:

Suggestions:

1. Managed Dedicated Server

In case, someone possess his/her own dedicated server there is need for someone else to manage it. Hence, one is having 2 possible routes to choose. One can either give priority to a managed server or comprise a hosting company that handles all form of details, maintenance, updating etc. Otherwise, one can call for an administrator to tackle this maintenance for him/her. The final option is that the user can manage it by himself/herself, i.e., if the user is skilled in such sort of things. If one talks about the core side, then hiring an administrator will cost the user additional bucks as well. Despite, if the user has a managed dedicated server installed he/she should know beforehand who has taken the role of maintenance and further details to keep everything running smoothly and efficiently with as little downtime as feasible.

2. Identify the Details

It is required by every user that he/she should be aware about all the details regarding his/her dedicated server along with his/her web host. If the user is aware about all the details he/she can easily understand what to do in which situation. If the user is not aware about the details when he/she indulges himself/herself in a contract with a devoted web host then it is similar as to inviting the trouble by own. To save oneself from such sort of things the user should make sure that he/she knows everything about the equipment, and the things like who is liable for what, strategy if any problems arise.

3. Support

The third and major key element that the user should be aware of is to save the time when problems arise i.e. the type of support he/she has from his/her web host. The host should be like the one who provides supreme support i.e., 24 hours per day, 7 days per week and 365 days per year. If the web host is not offering this then the user should migrate towards an alternative option because of the reason that some problems seem to arise after hours and not weekends or holidays.

At the end, as the user has become familiar to these timesaving tips and he/she will be in a better position to select a dedicated web host who matches his/her businesses needs. Moreover, as one is already aware of everything in advance he/she will never have any problems dealing with situations that occur due to his/her web host because of the reason that the user is now ready for every sort of challenge.