Only about 10 years late ;) FTP finally being removed
-
https://www.zdnet.com/article/firefox-to-remove-support-for-the-ftp-protocol/
Mozilla: "We're doing this for security reasons. FTP is an insecure protocol."
In August 2019, Google announced plans to remove the ability to access and view FTP links from Chrome.
-
And there was much rejoicing (yea)
-
-
Seems like a catch 22, many sites like OpenBSD.org still use ftp access.
-
You can still use an actual ftp client you just have to put some effort in. Which seems reasonable to me. It should be all too easy to use a completely insecure protocol without realising IMO.
Steve
-
Alright thanks for clarifying makes me feel better. Seems fine then windows 10 has ftp built into the cmd now. I'm pretty sure it integrated a lot of unix programs from OpenBSD actually.
-
@stephenw10 said in Only about 10 years late ;) FTP finally being removed:
You can still use an actual ftp client you just have to put some effort in. Which seems reasonable to me. It should be all too easy to use a completely insecure protocol without realising IMO.
Also: how do we know they DO use FTP and aren't running it with FTP/S? You can do implicit and explicit FTP/S, one running on another port (like SMTPS) and one running the "normal" 21 with STARTTLS. So at least it wouldn't be insecure ;)
Nevertheless, the only thing I've to say to FTP personally is:
Just DIE already! 
-
Yup, disabling all but ftps/sftp would also have been acceptable to me.
-
I have a lot of VoIP phones that will only update via FTP
Siemens Unify springs to mind.But then they don't use FF or Chrome.
I normally use FileZilla for FTP , don't even like the browser ftp GUI.
And it's within my own RFC1918 net./Bingo
