IIS FTP Weakness

[toya1uk]

I was wondering if somoeone could describe the "weakness " in the FTP Server in IIS 6.0, and how to reduse, or elimante the"weakness"

 

[fdinger]

some of the weakness refers to that of passwords....most of what you can do is use safer passwords such as ones with lowercase uppercase and numbers.

Josh Freudinger
-

http://napalmfiesta.cjb.net

 

[octothorpe]

FTP, and not just IIS, uses plain-text passwords which can be easily sniffed out. You can cover that by using (and requiring) SSL connections to FTP.

 

[jcprince]

Another option is to use secure FTP via SSH