Securing FTP with TLS
RFC 4217

Revision differences

Document history

Date Rev. By Action
2018-12-20
16 (System)
Received changes through RFC Editor sync (changed abstract to 'This document describes a mechanism that can be used by FTP clients and servers to implement ...
2015-10-14
16 (System) Notify list changed from <ericm@lne.com>, <pfh@uk.ibm.com>, <tjh@cryptsoft.com>, <mjc@uk.ibm.com> to <mjc@uk.ibm.com>, <tjh@cryptsoft.com>, <ericm@lne.com>
2012-08-22
16 (System) post-migration administrative database adjustment to the No Objection position for Steven Bellovin
2012-08-22
16 (System) post-migration administrative database adjustment to the No Objection position for Russ Housley
2005-11-01
16 Amy Vezza State Changes to RFC Published from RFC Ed Queue by Amy Vezza
2005-11-01
16 Amy Vezza [Note]: 'RFC 4217' added by Amy Vezza
2005-10-31
16 (System) RFC published
2005-03-02
16 Amy Vezza State Changes to RFC Ed Queue from Approved-announcement sent by Amy Vezza
2005-02-24
16 Amy Vezza IESG state changed to Approved-announcement sent
2005-02-24
16 Amy Vezza IESG has approved the document
2005-02-24
16 Amy Vezza Closed "Approve" ballot
2005-02-24
16 Ted Hardie State Changes to Approved-announcement to be sent from IESG Evaluation::AD Followup by Ted Hardie
2005-02-24
16 Russ Housley [Ballot Position Update] Position for Russ Housley has been changed to No Objection from Discuss by Russ Housley
2005-02-10
16 (System) Sub state has been changed to AD Follow up from New Id Needed
2005-02-10
16 (System) New version available: draft-murray-auth-ftp-ssl-16.txt
2004-10-15
16 Amy Vezza State Changes to IESG Evaluation::Revised ID Needed from IESG Evaluation by Amy Vezza
2004-10-15
16 (System) Removed from agenda for telechat - 2004-10-14
2004-10-14
16 Steven Bellovin [Ballot comment]
My comments have been folded in to Russ' DISCUSS.
2004-10-14
16 Steven Bellovin [Ballot Position Update] Position for Steve Bellovin has been changed to No Objection from Discuss by Steve Bellovin
2004-10-14
16 Thomas Narten
[Ballot comment]
There is no IANA considerations asking to register the commands/names used. But it seems FTP never created an IANA registry. Should probably be ...
2004-10-14
16 Thomas Narten [Ballot Position Update] New position, No Objection, has been recorded for Thomas Narten by Thomas Narten
2004-10-14
16 Harald Alvestrand
[Ballot comment]
Reviewed by John Loughney, Gen-ART

His review:

Technically, the document is ready, but it needs an additional editorial pass.
File a No Objection, ...
2004-10-14
16 Harald Alvestrand [Ballot Position Update] New position, No Objection, has been recorded for Harald Alvestrand by Harald Alvestrand
2004-10-14
16 Allison Mankin
[Ballot comment]
In the course of fixes for other purposes, the discussion in Section 15
of dropping FTP's use of the TCP URG should be ...
2004-10-14
16 Allison Mankin [Ballot Position Update] New position, No Objection, has been recorded for Allison Mankin by Allison Mankin
2004-10-14
16 Bill Fenner [Ballot Position Update] New position, No Objection, has been recorded for Bill Fenner by Bill Fenner
2004-10-14
16 Jon Peterson [Ballot Position Update] New position, No Objection, has been recorded for Jon Peterson by Jon Peterson
2004-10-14
16 Alex Zinin [Ballot Position Update] New position, No Objection, has been recorded for Alex Zinin by Alex Zinin
2004-10-13
16 David Kessens [Ballot Position Update] New position, No Objection, has been recorded for David Kessens by David Kessens
2004-10-13
16 Russ Housley
[Ballot comment]
The Abstract is way too long.  It is a full page.  Much of the information
  belongs in the Introduction.  Once moved to ...
2004-10-13
16 Russ Housley
[Ballot discuss]
Section 16.1.1 says:
  :
  : Similarly, it is recommended that the certificate used for
  : server authentication of Data connections ...
2004-10-13
16 Russ Housley [Ballot Position Update] New position, Discuss, has been recorded for Russ Housley by Russ Housley
2004-10-12
16 Steven Bellovin
[Ballot discuss]
[Review includes comments from Eric Rescorla]

Section 11.2 says:

      Section 15.1.1 discusses the issue of cross-checking a certificate
    ...
2004-10-11
16 Steven Bellovin
[Ballot discuss]
Section 11.2 says:

      Section 15.1.1 discusses the issue of cross-checking a certificate
      used to authenticate the data ...
2004-10-11
16 Steven Bellovin
[Ballot discuss]
Section 11.2 says:

      Section 15.1.1 discusses the issue of cross-checking a certificate
      used to authenticate the data ...
2004-10-11
16 Steven Bellovin [Ballot Position Update] New position, Discuss, has been recorded for Steve Bellovin by Steve Bellovin
2004-10-10
16 Margaret Cullen [Ballot Position Update] New position, No Objection, has been recorded for Margaret Wasserman by Margaret Wasserman
2004-10-04
16 Scott Hollenbeck [Ballot Position Update] Position for Scott Hollenbeck has been changed to No Objection from Undefined by Scott Hollenbeck
2004-10-04
16 Scott Hollenbeck [Ballot comment]
References need to be split and the page numbers in the Table of Contents are off by quite a bit.
2004-10-04
16 Scott Hollenbeck [Ballot Position Update] New position, Undefined, has been recorded for Scott Hollenbeck by Scott Hollenbeck
2004-09-28
16 Ted Hardie Placed on agenda for telechat - 2004-10-14 by Ted Hardie
2004-09-28
16 Ted Hardie State Changes to IESG Evaluation from Waiting for Writeup by Ted Hardie
2004-09-28
16 Ted Hardie [Ballot Position Update] New position, Yes, has been recorded for Ted Hardie
2004-09-28
16 Ted Hardie Ballot has been issued by Ted Hardie
2004-09-28
16 Ted Hardie Created "Approve" ballot
2004-09-13
16 (System) State has been changed to Waiting for Writeup from In Last Call by system
2004-08-19
16 Michelle Cotton
IANA Last Call Comments:
We understand this document to have no IANA Actions.  The
IANA Considerations section only points out an assigned
port number already ...
2004-08-16
16 Amy Vezza Last call sent
2004-08-16
16 Amy Vezza State Changes to In Last Call from Last Call Requested by Amy Vezza
2004-08-16
16 Ted Hardie State Changes to Last Call Requested from Publication Requested::External Party by Ted Hardie
2004-08-16
16 Ted Hardie Last Call was requested by Ted Hardie
2004-08-16
16 (System) Ballot writeup text was added
2004-08-16
16 (System) Last call text was added
2004-08-16
16 (System) Ballot approval text was added
2004-08-16
16 Ted Hardie Area acronymn has been changed to app from gen
2004-08-16
16 Ted Hardie Intended Status has been changed to Proposed Standard from None
2004-08-13
15 (System) New version available: draft-murray-auth-ftp-ssl-15.txt
2004-06-17
14 (System) New version available: draft-murray-auth-ftp-ssl-14.txt
2004-05-18
16 Ted Hardie State Changes to Publication Requested::External Party from Publication Requested by Ted Hardie
2004-05-18
16 Ted Hardie Pinged authors to respond to review comments.
2004-03-11
13 (System) New version available: draft-murray-auth-ftp-ssl-13.txt
2003-11-09
16 Ted Hardie

It's not clear to me that what is being described here is secure.
Because FTP is two connections, you need some way to tie the ...
2003-08-27
12 (System) New version available: draft-murray-auth-ftp-ssl-12.txt
2003-05-23
16 Ned Freed Shepherding AD has been changed to Hardie, Ted from Freed, Ned
2003-03-27
11 (System) New version available: draft-murray-auth-ftp-ssl-11.txt
2002-12-02
16 Steven Bellovin Being referred to the ftpext working group.
2002-12-02
16 Steven Bellovin Shepherding AD has been changed to Freed, Ned from Bellovin, Steve
2002-11-14
16 Steven Bellovin Draft Added by Bellovin, Steve
2002-10-01
10 (System) New version available: draft-murray-auth-ftp-ssl-10.txt
2002-04-03
09 (System) New version available: draft-murray-auth-ftp-ssl-09.txt
2001-10-09
08 (System) New version available: draft-murray-auth-ftp-ssl-08.txt
2001-04-09
07 (System) New version available: draft-murray-auth-ftp-ssl-07.txt
2000-09-19
06 (System) New version available: draft-murray-auth-ftp-ssl-06.txt
2000-01-27
05 (System) New version available: draft-murray-auth-ftp-ssl-05.txt
1998-09-02
04 (System) New version available: draft-murray-auth-ftp-ssl-04.txt
1998-08-14
03 (System) New version available: draft-murray-auth-ftp-ssl-03.txt
1997-08-01
02 (System) New version available: draft-murray-auth-ftp-ssl-02.txt
1997-03-26
01 (System) New version available: draft-murray-auth-ftp-ssl-01.txt
1996-11-28
00 (System) New version available: draft-murray-auth-ftp-ssl-00.txt