News for hackers. Stuff that matters.
Re:Stopping FTP support in Firefox 90 by handrous on Tuesday July 20, 2021 @01:50PM (#27896885)
ftps exists. The solution to http wasn't getting rid of it, it was pushing for more https.

I'm not saying there weren't good reasons to get rid of ftp support, but that doesn't seem like one.

Re:Stopping FTP support in Firefox 90 by desktopninja on Tuesday July 20, 2021 @02:41PM (#27897527)
Surprising how many people don't know about ftps. FTP with SSL.
Re:Stopping FTP support in Firefox 90 by floatboth on Tuesday July 20, 2021 @03:51PM (#27898409)
It's very obscure. Most things (mostly shared hosting lol) went straight to SSH's SFTP instead.
Re:Stopping FTP support in Firefox 90 by alerighi on Tuesday July 20, 2021 @04:14PM (#27898694)
SFTP is mainly a *NIX thing. And it's a terrible hack built on top of a protocol meant to be something really different.

Also, while in theory SFTP can be as secure as FTPS, in practice it's not. How many people really check that the server public key signature it's the correct one? You know that annoying message that appears the first time you connect to a server and you have to say yes and if you don't it will not let you continue?

Not checking that give you the same security as having a HTTPS/FTPS server with a self signed certificate. You trust blindly the identity of the server, but there could be someone doing a man in the middle and stealing all your data. In that situation, FTPS is more secure, mainly because you need a valid TLS certificate that will give you some guarantee about the identity of the server.

Re:Stopping FTP support in Firefox 90 by floatboth on Tuesday July 20, 2021 @08:35PM (#27900956)
At least in the pre-Let'sEncrypt era, lots of the shared hosting providers that gave you SFTP as an upgrade over plaintext FTP also used self-signed certs for their HTTPS admin panels :D

Server identity keys can be checked using SSHFP DNS records signed with DNSSEC, but that is not really mainstream unfortunately.

Re:Stopping FTP support in Firefox 90 by da_chicken on Wednesday July 21, 2021 @01:28AM (#27902646)
It's because there's multiple versions which are fundamentally incompatible.