sftp batch mode and interactive passwords

[dsr at tao.merseine.nu (Dan Ritter)]

On Wed, Feb 21, 2007 at 11:28:18PM -0500, John Abreau wrote:
> On 2/21/07, Robert La Ferla <robertlaferla at comcast.net> wrote:
> 
> I believe scp and sftp both use the same backend on the server;
> it seems odd that one would work and the other not. Any security
> problem would be with the backend, not with the client end, so
> blocking scp and enabling sftp is no more secure than enabling
> both scp and sftp.

SFTP uses the SSH subsystem facility, which runs an external
binary to accept commands. scp runs a local copy of scp itself
over an SSH link, much like "scp | ssh target scp".

-dsr-

-- 
.. .----. --   .-. . .- -.. .. -. --.   -.-- --- ..- .-.   -- .- .. .-.. .-.-.-   .-- .... ---   . .-.. ... .   .. ... ..--.. 
http://tao.merseine.nu/~dsr/eula.html is hereby incorporated by reference.

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.