Re: PC based sftp servers

[Scott Klement <pctech@xxxxxxxxxxxxxxxx>]

Hi Rob,

The OpenSSH server (the sftp server that IBM provides for IBM i) is the 
primary SSH server used in more than 85% of SSH installations, worldwide.

I don't understand why you say it's "fraught with security concerns".

Indeed, when I asked IBM why they didn't make a native SSH server 
instead of using the Unix one, security concerns were the main thing. 
The OpenSSH server is open source an analyzed by thousands of security 
and cryptography gurus to make sure the cryptography doesn't have any 
flaws in it. The IBMer I talked to said they couldn't match that level 
of security. A native tool would not be used by that many people, and 
only a few engineers would be given the opportunity to analyze the 
cryptography. The chance for an undiscovered vulnerability was just too 
high, they thought it was safer to just go with a widely-used, 
well-tested and bullet-proofed tool.


On 4/20/2012 9:43 AM, rob@xxxxxxxxx wrote:
> I am looking for a PC based sftp server.  I like regular ftp on the i. IBM
> wrote that and did it right.  However, for sftp they ported over a very
> poor sftp server that's fraught with security concerns.  I just can't get
> comfortable with that.
>
> Do you have some suggestions for a PC based sftp server?
>
>
> Rob Berendt