Re: [Jailkit-users] Re: Beginner Question - Security consequences of use chroot

[Olivier Sessink]

Kevin Hilton wrote:
> Is in any way sftp less secure than scp?  I thought with sftp the data
> channel was encrypted but not the command channel (or port).  Possible
> its the other way around. 

we're talking two different sftp things here.

There is ftp+ssl, which does what you describe

There is ftp+ssh, which is tunneled through the ssh connection, so 100%
encrypted.

> Although it has nothing to do with the
> jailkit, it seems like winscp should either offer a sftp or scp
> fallback. 

Last time I used winscp there was the possibility to choose 'sftp'
somewhere before logging in, and that worked with a non-interactive shell.

regards,
        Olivier