Thread: tls/ssl help for ftps

I just want to know what the difference is between an explicit ftp over tls and implicit ftp over tls. From what I understand, explicit means that security is turned on after the ftp client makes a connection to an ftp server. And implicit means that security is turned on before the connection.



However, I've read from an unconfirmed source that an explicit ftp over tls/ssl connection does not encrypt data being uploaded or downloaded from the ftp client. It only encrypts the login and authentication.

What I want to know is if this is true? I ask this because my seedbox provider only supports explicit tls/ssl connections and I want to ensure that the data I'm downloading from my seedbox is encrypted.

What you mean is SFTP and FTPS.

Those two names are very similar but have a completely different meaning and your friend meant the former one, because SFTP is FTP over secure shell (over SSH) and it merely encrypts the login process. It's also necessary for the user to have SSH access.

With FTP over SSL/TLS will also your data stream be encrypted, but the difference between implicit and explicit is technical one.

Explicit: " make Connection - ohh need to make the data stream encrypted - get SSL certificate explicitly" - The data stream will also be encrypted, but you will using the normal FTP port which is convenient for firewalls.
Implicit: "Make encrypted connection" - The connection will be automatically encrypted, but you have to use a special port.

Summery:
SFTP: Login Encrypted - Data not encrypted (FTP over SSH)
FTPS (Explicit): Login Encrypted - Data Encrypted - normal FTP port (FTP over TLS/SSL)
FTPS (Implicit): Login Encrpyted - Data Encrypted - different port (standard: 990) (FTP over TLS/SSL)

As a user there is no difference between implicit and explicit, but with the former one you need to open another port on your firewall which I assume is the reason why your seedbox provider only offers explicit.