YourHost.com FTPS Implementation
Monday, May 27th 2013
With the ever increasing demand for better security and PCI Compliance, we will be enforcing FTPS starting on Monday, May 27th. There will be no downtime. Please see below for FTPS FAQ.
Q: What is FTPS?
A: FTPS stands for FTP Secure, or FTP over SSL, or FTP over TLS.
Q: How is it different from standard FTP?
A: Standard FTP sends your login information and files using clear text, without encryption. This means if a hacker is sniffing the network packets, they could obtain your login information, as well as hijack your files. FTPS on the other hand, encrypts your login information and all the files you are transferring with SSL. It performs much like going from a standard HTTP website to a secure HTTPS URL.
Q: Will I still be able to use standard FTP if I choose to?
A: No, the only way to be PCI compliant, and to protect your login information and your files, we have to shutdown standard clear text FTP, and enforce FTPS.
Q: Will my web development software support FTPS?
A: Most modern web development software will support FTPS. Adobe Dreamweaver CS5.5 and above will support FTPS. Microsoft Expression Web will also support FTPS.
Q: Will my FTP software support FTPS?
A: Most newer versions of FTP clients will support FTPS. If you are using an older version of a FTP client, you may want to consider upgrading. Or you could download one of the free FTP softwares available that will support FTPS. Some of the ones we recommend are Filezilla (supports windows, osx, and linux), CoreFTP, and WS_FTP LE. All are free to download and use, and they all support FTPS.
Q: If I use Filezilla, what option do I pick under encryption?
A: You want to select "Require explicit FTP over TLS"
Q: If I use CoreFTP, what connection type do I select?
A: You want to select "Auth SSL"
Q: If I use WS_FTP LE, what connection type do I select?
A: You want to select "FTP/SSL (Auth SSL)"
Please don't hesitate to contact us if you have any questions or problems.
YourHost.com Tech Support
Support Console: http://support.yourhost.com