Thursday, November 10, 2011

The difference between TFTP and FTP


(http://searchsecurity.techtarget.com/answer/The-difference-between-TFTP-and-FTP)
My company is currently implementing trivial file transfer protocol (TFTP) on OS level of AS400 instead of file transfer protocol (FTP). What is the major security difference between those two protocols? What are the security advantages and disadvantages of implementing TFTP? I heard that TFTP is a less secure protocol (no user ID or password needed) than FTP? What measures should be taken to strengthen the security over data file transfer?
My initial thought was the security difference was about the same as between a bank-vault door and a screen door. However, there are problems with FTP too, so that is not quite right. It's more like a screen door with a lock vs. a screen door without one. The basic differences between FTP and TFTP are:
  • FTP provides minimal security through user logins
  • TFTP does not use logins
  • FTP provides a reliable service through its use of TCP
  • TFTP does not since it uses UDP
  • FTP uses two connections
  • TFTP uses one connection (stop and wait)
  • FTP provides many commands
  • TFTP provides only five commands

No comments:

Post a Comment