Thanks all for the input. John Miller Software Developer Phone: 612-547-7573 Fax: 612-547-7580 Mail Stop: T23 MailTo:john.miller at rbcdain.com -----Original Message----- From: Ben Lutgens [mailto:blutgens at sistina.com] Sent: Monday, April 29, 2002 2:40 PM To: tclug-list at mn-linux.org Subject: Re: [TCLUG] FTP and logging in On Mon, Apr 29, 2002 at 01:13:53PM -0500, Miller, John wrote: >When a user logs on to an FTP server. Are their user id and password transmitted in >plain text or does the FTP client try to hide it and if so how. > plain text. fire up your favorite sniffer. Look into SSL wrapping your ftpd. Some support this right out of the box (proftpd) and still others will work if you use stunnel or sslwrap. Anything plain-text is bad bad bad. -- Ben Lutgens | http://people.sistina.com/~blutgens/ System Administrator | http://www.sistina.com/ Sistina Software Inc. | "If you love something set it free, if it doesn't come back to you hunt it down and set it on fire" -- George Carlin