[Prev][Next][Index][Thread]
Re: NULL_ ciphersuite meets ftps
> >> Speaking as a potential implementor, the approach in the ftp-ssl draft
> >> gets my vote on time to market and on how readily it can be implemented
> >> correctly and interoperably.
>
> ftpsec-09 current has four organizations (that I know of, there are
> probably mode) implementing using kerberos or gssapi. Three of these
> implementations are independent. With a few exceptions which recent
> version of the draft address, they interoperate.
However, that proposal doesn't address TLS, and the TLS-enabled
proposal is far simpler. I see your point re Kerberized FTP;
I expect you see mine re SSL-ized FTP, which can also address
Kerberization through the proposed Kerberos flavors of TLS.
It does make sense to me to have a single FTPS protocol, but I do
feel that it's strikingly easier to do that by layering over SSL/TLS
than by requiring the complexities of the cat-ftpsec approach.
- Dave
Follow-Ups: