Ask HN: Do you still use FTP?
I am checking to see if FTP is still popular deployment method due to its simplicity over git workflow. I am working on a side-project related to it.
What's your deployment workflow like? Do you use plain FTP or SFTP?
Thanks
16 comments
[ 2.9 ms ] story [ 21.6 ms ] threadOtherwise, I've been using SFTP for a personal project where I'm using it as a part of a document storage API. The documents are managed by a SQLite application that stores their metadata.
FTP servers are easy to set up and aren't bound by someone's ecosystem. Plus, I can use any client I want to access the documents if I need to.
Going further, we have a couple of dev offices geographically apart. Large tarballs and/or assets are shared by private P2P.
Now I use rsync over SSH, or SFTP.
Do you revision control this content somewhere?
I used ftp last week to download a dataset from a vendor. (MolPort distributes chemical datasets over password-protected ftp.)
I haven't upgraded Firefox because they dropped ftp support, and it's really nice to use my browser to view a site, read update notices, etc. before switching to ncftp for the actual data downloads.
FTP is plain text file transfer protocol, there's not really any good reason to use it anymore IMHO
FTPS is an extension to FTP to support SSL/TLS
SFTP is "Secure Shell File Transfer Protocol" (e.g. over SSH)
We had a project once where the customer asked us to use "SFTP" to manage some critical files. This was handled in-app, we added the functionality, did our testing and moved on.
Later when we did integration testing with their system we discovered that what the customer actually meant was to ask us for "FTPS" and we had to rip out the SFTP library with FTPS stuff.
Something similar _almost_ happened a couple of years later in another project (due to miscommunication by someone doing requirements gathering) and this time we caught it early.
Right on. Requirements gathering and problem scoping is refined conversation.
We were in a meeting with someone who wanted us to predict an event that caused losses in the 9 figures 48 hours before it happens and trigger an alert.
48 hours sounded round and arbitrary, so I used "negative framing" and asked "At what point would an alert be useless. At what point is it too late to inform you?"
He said "It's never too late. Even if you predict it two minutes before, we can do things. We have procedures".
Effectively reducing from 48 hours to 2 minutes. This changes the whole thing.
Requirements that are polluted by client's solutions should always be explored further for the actual job to be done, and the actual problem to be solved.
https://winscp.net/
You can also use the portable version without running an installer first:
https://winscp.net/download/WinSCP-5.19.2-Portable.zip
FTP is obsolete.
I would NEVER use plain FTP for deployment. You really need some strong encryption for authentication and transfer. If at all possible use SFTP in place of FTP.
I think the only valid use case for FTP is accessing legacy and embedded systems. But only if you control the network. I think it had been at least four years since I had to log into an old FTP system.