Difference Between FTP and SFTP
Difference Between FTP and SFTP
1. Comparison Chart
2. Definition
3. Key Differences
4. Conclusion
Comparison Chart
BASIS FOR
FTP SFTP
COMPARISON
hosts.
application program).
Connection FTP establishes control SFTP transfers the file under the
server.
Encryption FTP password and data SFTP encrypts the data before
format.
Definition of FTP
FTP (File Transfer Protocol) is a protocol in TCP/IP which copies a file from
one host to another host. Though, it seems very simple to transfer the file from
one host to another. But there are some problems like the two systems that
sends and receives file may have a different way to represent the data; they
may have different file name conventions, may have different directory
structures.
FTP provides a simple solution to all the problems above. FTP being different
from other client-server application establishes two connections between the
communicating hosts. One connection is for data transfer, and other is for
the control information (command and responses). FTP is more efficient than
other client-server applications as it has a separate connection for data and
commands.
Whenever a user starts FTP session, it first establishes a connection with the
host to whom the file has to be transferred using control connection then it
establishes the data connection for transferring the file.The data connection
gets opened and closed after transferring each file. However, the control
connection remains connected for the entire FTP session.
Definition of SFTP
SFTP (Secure File Transfer Protocol) is a secure way to transfer the files over
the network. Though we have FTP protocol for transferring the files from one
host to another on the network but, the time FTP was designed security was not
a major issue.
FTP protocol requires the password for establishing the connection with the host
to whom file has to be sent, but the password is in the plaintext which has a
threat of being intercepted by an attacker. The attacker can then misuse the
password. The data is also sent in the plain text over data connection which is
again insecure.
So, SFTP introduced a secure channel to transfer the files over the network.
SFTP is a part of SSH (Secure Shell) protocol which is actually a program in
Unix. The SSH protocol establishes a secure connection between client and
server, and then the SFTP program works similar to FTP and transfers the file in
the secure channel created by SSH. In this way, the file can be transferred
securely using SFTP.
Both FTP and SFTP are the file transferring protocol, but SFTP provides a secure
way to transfer the file from one host to another host on the network.