[Updated] What is the difference between FTPS and SFTP?

What is FTPS and SFTP?

FTPS (FTP/SSL) is a name used to provide multiple ways for FTP software to perform secure file transfers. Each involves the use of a lower than standard FTP protocol SSL/TLS layer to encrypt the control and/or data channel.

SFTP (SSH File Transfer Protocol) is a network protocol that provides file transfer and manipulation capabilities over any reliable data stream. It is typically used with the SSH-2 protocol (TCP port 22) to provide secure file transfers, but can also be used with other protocols.

What is the Difference between FTPS and SFTP?

SFTP is not a form of FTP. They are two completely different protocols. In fact, FTPS and SFTP are completely unrelated and only have similarities in the structure of many commands.

• FTPS is FTP with SSL, which is for security. It uses a control channel and opens a new connection for data transfer. Since it uses SSL, it requires a certificate.
• SFTP (SSH File Transfer Protocol/Secure File Transfer Protocol) is designed as an extension to SSH to provide file transfer capabilities, and based on this, it typically only uses the SSH port for data and control.
• In most SSH server installations, you will get SFTP support, but FTPS requires additional configuration of a supported FTP server.

Advantages and disadvantages of FTPS/SFTP

The advantages of FTPS

1. High level of use
2. Communication can be read and understood
3. Provides for server-to-server file transfers
4. SSL/TLS has a good authentication mechanism (X.509 certificate feature)
5. FTP and SSL/TLS support is built into many Internet communication frameworks

The disadvantages of FTPS

1. There is no uniform directory listing format
2. Requires a secondary DATA channel, which makes it difficult to use behind a firewall
3. No standard for filename character set (encoding) defined
4. Not all FTP servers support SSL/TLS
5. No standard way to get and change file or directory attributes

---

The advantages of SFTP

1. Has a good standards background that strictly defines most, if not all, aspects of operations
2. Only one connection (no data connection required)
3. Connections are always secure
4. Directory listings are uniform and machine-readable
5. The protocol includes operation of permissions and attributes, file locking and more features

The disadvantages of SFTP

1. Communication is binary and cannot be recorded "as is" for human reading
2. SSH keys are more difficult to manage and verify
3. The standard defines some content as optional or recommended, which can lead to some compatibility issues between different software titles from different vendors.
4. No server-to-server copy and recursive directory deletion operations
5. No built-in SSH/SFTP support in the VCL and .NET frameworks