Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Which is a bit like saying, at least the 70mph mountain pass road has a guard rail.


Well, if not TLS, then what would you use? Noise?

TLS is the only widely deployed standard cryptographic protocol which has ever protected any internet communication to any degree. For its many flaws and patchwork, there is nothing even competing in the category.


There is ssh.

Actually sftp (ssh) tends to be a lot more popular than FTPS (TLS) because of the whole FTPS NAT catastrophe that sftp doesn't have.


Yes. In my experience FTPS is a whole bucket of nope. I've never encountered a situation where we couldn't use SFTP.

The only time I've had FTPS work 'well' is when the client & server were both written by the same company (Tumbleweed) and they don't follow the RFC exactly.


It doesn't matter if the connection is secured if the data itself is not secured. Transport security is a red herring in a complex system.

If you are driving a car at 70mph around a mountain pass, even a really strong guard rail leaves the possibility that you could plummet ten thousand feet to your death. If, on the other hand, you were driving on the Bonneville salt flats at 45mph, there is much, much less danger.

Secure your data. Then paint the bike shed.




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: