FTPES:它会加密数据吗？

Question

我当前使用FTPES连接到我的FTP服务器。

我想知道:当我连接到FTP服务器时，我的PC和服务器之间传输的数据是加密的吗？从日志中我可以看到它是经过身份验证的。

这是我的服务器日志。从它我能知道它是否被加密了吗？

Status: Retrieving directory listing...
Command:    CWD MyS03
Response:   250 CWD command successful
Command:    PWD
Response:   257 "/MyFiles" is the current directory
Command:    PASV
Response:   227 Entering Passive Mode (37,58,52,72,195,33).
Command:    MLSD
Response:   150 Opening ASCII mode data connection for MLSD
Response:   226 Transfer complete
Status: Directory listing successful
Error:  Connection timed out
Error:  File transfer failed after transferring 155,893,760 bytes in 247 seconds
Status: Resolving address of 192.168.10.111
Status: Connecting to 11.135.156.147:21210...
Status: Connection established, waiting for welcome message...
Response:   220 (vsFTPd 2.3.5)
Command:    AUTH TLS
Response:   234 Proceed with negotiation.
Status: Initializing TLS...
Status: Verifying certificate...
Command:    USER darklord
Status: TLS/SSL connection established.
Response:   331 Please specify the password.
Command:    PASS ********
Response:   230 Login successful.
Command:    OPTS UTF8 ON
Response:   200 Always in UTF8 mode.
Command:    PBSZ 0
Response:   200 PBSZ set to 0.
Command:    PROT P
Response:   200 PROT now Private.
Status: Connected
Status: Starting download of /test.mov
Command:    CWD /rtorrent/data
Response:   250 Directory successfully changed.
Command:    TYPE I
Response:   200 Switching to Binary mode.
Command:    PASV
Response:   227 Entering Passive Mode (5,135,156,147,78,83).
Command:    REST 155893760
Response:   350 Restart position accepted (55893760).
Command:    RETR test.mov
Response:   150 Opening BINARY mode data connection for test.mov (197992856 bytes). 

Answer 1

通常，FTPS (FTPES)并不一定意味着数据是加密的。尽管它通常是加密的(就像在这个特定实例中一样)。

您的客户端使用PROT P命令请求了专用数据通道保护级别。私有级意味着数据将受到完整性和机密性保护。

当服务器确认请求(响应200 PROT now Private)时，数据被加密(=机密性保护)。

有关详情，请参阅RFC 2228。