On Fri, 28 Aug 2009, Deepesh Damodaran wrote:

Please don't top-post.

> curl_easy_setopt(curl, CURLOPT_FTP_SSL, (long)CURLFTPSSL_ALL);
> curl_easy_setopt(curl, CURLOPT_SSL_VERIFYHOST, 0);
> curl_easy_setopt(curl, CURLOPT_SSL_VERIFYPEER, 0);
>
> Would it be possible for you to throw some light on the security on
> data/control channels of TCP connections?

It will use encrypted data and control connections, BUT without verifying the
server's certificate (the two CURLOPT_SSL_VERIFY* options) the security is
very weak since you won't be able to detect for example a man in the middle
attack.

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/cgi-bin/mailman/listinfo/curl-users
FAQ:        http://curl.haxx.se/docs/faq.html
Etiquette:  http://curl.haxx.se/mail/etiquette.html