http://www-03.ibm.com/servers/eserver/zseries/zos/unix/pdf/docs/fotza105 .pdf
from page 14: "OpenSSH's sftp and IBM Communications Server's FTP with System SSL differ from each other. OpenSSH's sftp is an Open Source implementation of the IETF Secure Shell (SECSH) "SSH File Transfer Protocol " Internet Draft. OpenSSH uses a statically linked OpenSSL archive library to perform its cryptographic functions. OpenSSH does not provide key management facilities, nor is integrated with those provided by IBM. Password authentication is the only form of authentication where OpenSSH queries the security product. Public key authentication is currently overseen by the daemon. The Communications Server FTP server and client support Transport Layer Security (TLS). The FTP client and server negotiate the use of TLS based on a subset of the FTP security negotiation functions documented in RFC 2228. FTP uses z/OS System SSL, and therefore can use the cryptographic hardware. FTP can also use SAF facilities for key management." -----Original Message----- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Hal Merritt Sent: Tuesday, July 29, 2008 10:27 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: secure ftp on the mainframe Do you have any links to SFTP sources? Google search results were confusing and ambiguous. -----Original Message----- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Walt Farrell Sent: Thursday, July 24, 2008 11:04 AM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: secure ftp on the mainframe On Thu, 24 Jul 2008 08:00:55 -0700, Kurt Eastwood <[EMAIL PROTECTED]> wrote: >Is SFTP really a 'secure ftp'? SFTP is not FTP at all. It is a secure, FTP-like communication protocol. (SFTP here, is a function provided by the ssh protocols.) I'm not sure anyone has really stated that in this thread, so I thought I'd mention it. Others have discussed additional details that I don't need to repeat. -- Walt Farrell, CISSP IBM STSM, z/OS Security Design ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
