Comment by Dylan16807
9 hours ago
> SFTP can be used for similar functionality, but it requires users to have SSH access.
Security-wise you set it not to run commands (and maybe chroot) and you're done, right? And difficulty-wise isn't granting SSH access very similar to FTP access?
I don't understand the issue.
SSH requires a system account. FTP access can be granted and revoked via a database, or even a text file.
That depends on your server.
But in the most common case a "system account" is a line in two text files, isn't it?
It’s way more of a hassle than that. Things like per-user chroot, managing permissions, restricting access to port 22… all much more difficult with SFTP. With an FTP server like vsftpd, you can just create virtual users and assign them home directories, then everything is just owned by the user running the ftp daemon process.
1 reply →