Most SSH server installations will include SFTP support (or Open SSH can be used)
Requires a server X.509 certificate and private key. Performed via SSH keys (which only provide a public key and do not typically confirm ownership information) (which contains a public key and some ownership information along with a private key) Operates via uniform directory listing and documented standards For example, there is no universal way to get/change file or directory attributes. Only 1 is required (commands and data use the same connection)įile and Directory Listings and Operations More common in more recent devices and softwareĪt least 2: one port to issue commands and a separate data port for each directory listing or file transfer Most commonly used, primarily due to its ubiquitous legacy Clients can be authenticated using usernames and passwords or public key authentication.
Server authentication is typically achieved by securely distributing the server’s public key to clients beforehand. Client authentication can also be performed using usernames and passwords or client certificate verification. Server authentication is verified using a public key infrastructure.