On Sat, Aug 25, 2001 at 11:30:32AM +0200, Martin F Krafft wrote: > hi, > i operate a couple of non-profit servers for friends to host their > websites. there is only ssh, no ftp, but most users are mac or > windoze, and so they have considerable difficulty uploading, even with > the OpenSSL or other comparable scp-featuring packages. i would like > to enable user ftp for them to facilitate, but it's too much of a > security risk due to clear text passwords being sent over the wire. so > i am wondering what other alternatives there are to allow users easy > remote management of their websites, similar to ftp. or is there even > an ssh-capable rsync client for mac and windoze, preferably, of > course, with a GUI? > You could use anonymous FTP, set up properly it is quite secure. Be especially sure that the upload directory has write but NOT read permissions; otherwise you may find you have become a half-way house to all sorts of unsavoury things. This means you have to vet the uploads and move appropriate ones to the download directory.
good luck Cliff
