What's the difference between...

[jaykays]

Tweet

sftp and ssl. I use ssl but I have to pay for that. I understand that sftp is free to install on your pc and doesn't need constant renewing. So, what is really the difference between the two? Do they do the same job?

[webhostuk]

Hello,

sftp is secure access to site files to upload or download. SSL is secure browsing of site site mostly used on site where you update you payment details.
to safegaurd those details and send them in encrypted mode you use SSL and its paid.

[jaykays]

That's a great answer- thank you. I know this may sound daft but why do people use sftp when they've got security such as McAfee?

[quids4free]

SFTP is different to an antivirus, it's a method of uploading to a server which means that your files are encrypted when they are transmitted over the internet, instead of just sent in plain text.

Imagine this scenario, you are uploading a file that contains the username and password to access your database because your CMS (e.g. WordPress) needs this. If you use standard FTP this file is sent unencrypted in plain text, so if someone had access to any router between your computer and the server you are uploading it to and the right network tools they could packet-sniff this information and read it. If you uploaded via SFTP the only information they would see is an encoded text string that they wouldn't be able to do anything with, instead of your username and password in plain text.

In practise this is unlikely to happen, but if you are offered SFTP instead of just plain FTP then there is no reason not to use it.

[jaykays]

Thanks, that's made everything crystal clear. Excellent answer.

[sequencehosting]

Hello,

sftp is secure access to site files to upload or download. SSL is secure browsing of site site mostly used on site where you update you payment details.
to safegaurd those details and send them in encrypted mode you use SSL and its paid.

I couldn't have said it any better myself.

Jack