SFTP

SFTP is based on SSH which makes it really simple to deploy if you have a Linux/*nix server with openssh installed. It allows secure channels without the need for x.509 certificates. It just needs an initial manual key exchange or user setup on the server.

Authentication can either be made with

  • Username and password
  • Or username and SSH key file (recommended)
    • This SSH key can optionally be protected with a password

Special settings

  • Remote path: Because a connection SSH user is usually a system user it sees the full path on the file-system when used with openssh as server. A jail-root is maybe applied if the server process is a FTP server with SFTP support.