muzzer Posted February 24, 2015 Share Posted February 24, 2015 ST3 and sFTP plugin is nice but one thing I don't like (and reason I no longer use that plugin) is that it stores passwords in plaintext files. If your computer gets compromised the all your sites are open slather. I've been hurt by this before using filezilla (also stores passwords unencrypted). I now use winSCP with an encrypted masterpassword, seems to work nice. Just my 2 cents.... 1 Link to comment Share on other sites More sharing options...
Mike Rockett Posted February 24, 2015 Share Posted February 24, 2015 +1 for WinSCP - been using it for a few weeks now, and I think it's pretty fantastic. I do prefer to keep ST3 and the FTP client separate. It just makes more sense to me. Link to comment Share on other sites More sharing options...
alan Posted February 24, 2015 Share Posted February 24, 2015 +1 that muzzer (plain text passwords). But then I finally understood and began doing SSH connection by certificate not password. I believe this is generally thought by security people to be the safer option (by some large degree). Then ST3 (and other stuff like Terminal and Transmit.app) work like magic - you don't need to enter a password and it connects! When I got it working I was grinning ear to ear. This means your site config files in ST3 for SFTP no longer state any password at all and connection works automatically. Safe. This is one of the web pages that I read en-route to finally understanding how to do this passwordless connection, in case it helps. 1 Link to comment Share on other sites More sharing options...
muzzer Posted February 24, 2015 Share Posted February 24, 2015 @alan Yeah, agreed, SSH is nice and works well in an ideal world. It is the way to go if it's an option. However, many clients are using shared hosting so SSH is not an option. For these sites storing passwords in plain text files is not great. I can't understand why programs with massive uptake like filezilla still do this, it's a major negative IMO. I would definitely recommend anyone using filezilla check out winscp. 1 Link to comment Share on other sites More sharing options...
alan Posted February 24, 2015 Share Posted February 24, 2015 @muzzer Yep, plain text passwords are something I try hard to avoid. Re shared hosting, I have a routine VPS (not a dedicated piece of tin) and I was surprised that access to cPanel was all I needed (I seem to remember...). Sorry if I am looking back with rose tinted glasses and it was more tricky than I am remembering, but I am fairly sure I'm not and it was just a case of me (or the support guys) getting a public key (once) for my virtual box of CentOS and then me following the steps and using my local OS (OS X in my case) and cPanel and the result was a working passwordless setup. Each time I add a new domain I go into it's cPanel and use the certificate GUI to paste certificate code, approve it and 'pop' I can access from my desktop, takes less than 5mins per domain I add. Now I've used it, I would never go back to a setup that meant I had to use passwords (plain text or hashed) Link to comment Share on other sites More sharing options...
callpri Posted December 16, 2016 Share Posted December 16, 2016 (edited) I like to use Codelobster It has internal Explorer to work with remote servers via FTP/SFTP. Edited December 16, 2016 by LostKobrakai Removed link for spam suspicion reasons Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now