Hi,

I'm still evaluating libcurl for use in a crossplatform (Windows and
MacOS X) FTPS client. Unfortunately, I'm also trying to get up to speed
on SSL quickly, so please bear with me if my questions seem stupid.

I just noticed this in the 7.10 TODO document:

"* Add FTPS support with SSL for the data connection too. This should
be made according to the specs written in
draft-murray-auth-ftp-ssl-08.txt, "Securing FTP with TLS""

Does this mean libcurl's data connection when using SSL is all in the clear?

I also noticed that the current version of that ftp-ssl draft is
draft-murray-auth-ftp-ssl-10.txt. In that draft, the use of AUTH TLS is
recommended over the now-deprecated implicit SSL. I've only been able to
use implicit SSL so far, partly because that's all my test server
supports. Does anyone know whether there is support in libcurl for AUTH
TLS? Is this something I can do outside libcurl by using CURLOPT_PREQUOTE?

Dave Halbakken

-------------------------------------------------------
This sf.net email is sponsored by: Influence the future
of Java(TM) technology. Join the Java Community
Process(SM) (JCP(SM)) program now.
http://ads.sourceforge.net/cgi-bin/redirect.pl?sunm0004en
Received on 2002-10-31