I'm referring to 
<https://datatracker.ietf.org/doc/html/draft-ietf-secsh-filexfer-02> and more 
recent drafts.

"Even though this protocol is described in the context of the SSH2
   protocol, this protocol is general and independent of the rest of the
   SSH2 protocol suite.  It could be used in a number of different
   applications, such as secure file transfer over TLS RFC 2246 [1] and
   transfer of management information in VPN applications."


--
Shmuel (Seymour J.) Metz
http://mason.gmu.edu/~smetz3
עַם יִשְׂרָאֵל חַי
נֵ֣צַח יִשְׂרָאֵ֔ל לֹ֥א יְשַׁקֵּ֖ר




________________________________________
From: IBM Mainframe Discussion List <[email protected]> on behalf of 
Kirk Wolf <[email protected]>
Sent: Sunday, January 25, 2026 1:18 PM
To: [email protected] <[email protected]>
Subject: Re: Filezilla - Xfer to ZOS USS filesystem?


External Message: Use Caution


"SFTP is not layered on SSH, but it is secure only when running under SSH or an 
equivalent."

By "SFTP" you are referring to something other than the SSH2 Filexfer protocol?

Kirk Wolf
Dovetailed Technologies
https://coztoolkit.com/

On Sat, Jan 24, 2026, at 7:00 PM, Seymour J Metz wrote:
> FTP is not layered on Telnet; they're independent.
>
> SFTP is not layered on SSH, but it is secure only when running under SSH or 
> an equivalent.
>
>
> --
> Shmuel (Seymour J.) Metz
> http://mason.gmu.edu/~smetz3
> עַם יִשְׂרָאֵל חַי
> נֵ֣צַח יִשְׂרָאֵ֔ל לֹ֥א יְשַׁקֵּ֖ר
>
>
>
>
> ________________________________________
> From: IBM Mainframe Discussion List <[email protected]> on behalf of 
> Paul Gilmartin <[email protected]>
> Sent: Saturday, January 24, 2026 6:59 PM
> To: [email protected] <[email protected]>
> Subject: Re: Filezilla - Xfer to ZOS USS filesystem?
>
>
> External Message: Use Caution
>
>
> On Sat, 24 Jan 2026 22:46:03 +0000, Seymour J Metz wrote:
>
> >"That" is Telnet.
> >
> >Internet Engineering Task Force (IETF)
> >
> >Start with Request for Comments: 6530:   Overview and Framework for 
> >Internationalized Email <https://datatracker.ietf.org/doc/html/rfc6530>, 
> >RFCs 6531-6533.
> >
> >There ss RFC 2066, but that's experimental.
> >
> >It seems the want you to use SSH.
> >
> <https://en.wikipedia.org/wiki/Telnet>
>     Telnet transmits all information including usernames and passwords
>     in plaintext so it is not recommended for security-sensitive applications
>     ...
>
> Is FTP layered on TELNET even as sftp on ssh?  I had thought not.
> sftp and ssh both use port 22; TELNET uses 23 and FTP 21.
>
> When you mentioned email, I imagined a successor to RFC 822.
> I know of no internet standard straying from CRLF.
>
> If one wants Windows conventions, it's better to use Windows
> software than WSL.
>
> --
> Thanks,
> gil
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to [email protected] with the message: INFO IBM-MAIN
>
>
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to [email protected] with the message: INFO IBM-MAIN
>

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN



----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to