← Back to context

Comment by Dylan16807

1 hour ago

That depends on your server.

But in the most common case a "system account" is a line in two text files, isn't it?

It’s way more of a hassle than that. Things like per-user chroot, managing permissions, restricting access to port 22… all much more difficult with SFTP. With an FTP server like vsftpd, you can just create virtual users and assign them home directories, then everything is just owned by the user running the ftp daemon process.

  • Those things don't require noticeably more code to automate with SFTP than with FTP, or need a more complicated interface. Maybe nobody has written that code to make the management easy? Someone that cares about security should then.

    Google suggests that some servers can do SFTP with virtual users.