DevHeads.net

FTP with SSL/TLS in Dolphin

Hi, is there a reason why FTP with SSL/TSL (ftps://) has not been implemented
in Dolphin?

There are some wishlist bug reports about, like the following from from 2003:
<a href="https://bugs.kde.org/show_bug.cgi?id=66117" title="https://bugs.kde.org/show_bug.cgi?id=66117">https://bugs.kde.org/show_bug.cgi?id=66117</a>

There was a kio-ftps, but it didn't work very well. Furthermore, it hasn't
been ported to Plasma / KF 5.

I wonder whether this protocol is somehow discouraged, or it's just a missing
feature.

Comments

Re: FTP with SSL/TLS in Dolphin

By Martin Steigerwald at 01/30/2017 - 07:32

Am Montag, 30. Januar 2017, 06:42:08 CET schrieb solitone:
Did you also consider looking through the wishlist bugs and… using the one
thats most approbiate to ask about its status and probably vote on it?

Also… – that didn´t come to my mind as you asked on kdepim-users – in one way
or another it might be helpful to contact developers about it, there is a
frameworks development mailing list and as KIO is a framework… But I think
either commenting on an existing bug report… or if none of them are suitable
creating a new one… would be the first step.

As to why there is not ftps support in KIO I have no idea.

Thanks,

Re: FTP with SSL/TLS in Dolphin

By solitone at 01/31/2017 - 03:08

On Monday, January 30, 2017 12:32:14 PM CET Martin Steigerwald wrote:
Hi Martin,
yes, I replied and voted for that old bug I linked in the first message:
<a href="https://bugs.kde.org/show_bug.cgi?id=66117" title="https://bugs.kde.org/show_bug.cgi?id=66117">https://bugs.kde.org/show_bug.cgi?id=66117</a>

Re: FTP with SSL/TLS in Dolphin

By Martin Steigerwald at 01/31/2017 - 06:04

Am Dienstag, 31. Januar 2017, 08:08:35 CET schrieb solitone:
Thank you. Well, it may be that some persistence is required – since actually
it is an old report not yet addressed. I.e. asking back after some amount of
time or even try to contact the responsible KDE developers or developer team
about it. In the end of course, since it is a free software project and you
got all of this nice software for free, it all depends whether someone is
actually willing to implement FTPS. Unless you contract someone for it and
then pay for implementing the feature. I believe there was / is a bounty
program somewhere.

Re: FTP with SSL/TLS in Dolphin

By Kai Bojens at 01/31/2017 - 09:29

Just out of curiosity: does anybody know if there were any technical
reasons why FTPS support hasn't been ported? Or was it just a lack of
manpower?

Re: FTP with SSL/TLS in Dolphin

By Martin Steigerwald at 01/31/2017 - 12:28

Am Dienstag, 31. Januar 2017, 13:29:48 CET schrieb Kai Bojens:
FTPS support was not part of KDE as far as I understand, but was an extra
module. As to why its author or someone else didn´t port this over I have no
idea.

Re: FTP with SSL/TLS in Dolphin

By Volker Wysk at 01/30/2017 - 02:58

Am Montag, 30. Januar 2017, 06:42:08 CET schrieb solitone:
Shouldn't that bee "sftp://"?

Konqueror works with "sftp://".

Bye
Volker

Re: FTP with SSL/TLS in Dolphin

By solitone at 01/30/2017 - 03:26

On Monday, January 30, 2017 7:58:10 AM CET Volker Wysk wrote:
No, that is FTP over SSH, not FTP with SSL/TLS.

Yes, I confirm that FTP over SSH (sftp://) works also in Dolphin. However, FTP
with SSL/TSL (ftps://) doesn't.

Re: FTP with SSL/TLS in Dolphin

By Kevin Krammer at 01/30/2017 - 07:06

On Monday, 2017-01-30, 08:26:10, solitone wrote:
Actually that is SFTP, a different protocol, but of course you are right that
it is not FTPS.

Regarding your original question my guess would be that SFTP is just better
and easier to implement because it is newer and specifically addressing the
single secure connection model.

FTP is a very old and weird protocol, basically requiring two connections, one
from the client to the server (control) and one from the server to the client
(data).

There have been extensions to have the client open both connections as reverse
connections are usually blocked by firewalls, but there are still two of them.

SSL can only secure individual connections, so the data on each connection is
secure but there is no safe way to related those two connections to each
other, opening up possibilities for timing related attacks, etc.

Are you working with a specific host that can't do SFTP or SSH at all?

Cheers,
Kevin

Re: FTP with SSL/TLS in Dolphin

By solitone at 01/31/2017 - 02:34

On Monday, January 30, 2017 12:06:41 PM CET Kevin Krammer wrote:
That's right:
<a href="https://en.wikipedia.org/wiki/FTPS" title="https://en.wikipedia.org/wiki/FTPS">https://en.wikipedia.org/wiki/FTPS</a>

I have a QNAP NFS that allows both FTPS and SFTP, but till now I haven't found
a way to allow non-admin users to login with SFTP--some non-standard
configuration is needed.

BTW, thanks for your explanation about FTPS limitations, now I have a better
understanding.