Differences between SFTP and "FTP over SSH"

While looking for an SFTP client in C# SSH File Transfer Protocol (SFTP), I've come across these two suitable projects - one and two. While trying to understand the basics, I came across this confusing Wikipedia article. What is difference between SFTP and FTP over SSH? No library seems to give support for "FTP over SSH", if it is different.

49.9k 16 16 gold badges 138 138 silver badges 136 136 bronze badges asked Jan 13, 2009 at 19:37 sundar venugopal sundar venugopal 3,110 6 6 gold badges 41 41 silver badges 45 45 bronze badges You can also see this article: (The difference Between FTP and SFTP Protocols) componentpro.com/… Commented Feb 20, 2015 at 19:00

9 Answers 9

Here is the difference:

SFTP (SSH file transfer protocol) is a protocol that provides file transfer and manipulation capabilities. It can work over any reliable data stream, but is typically used with SSH
"FTP over SSH" uses the regular old FTP protocol, but an SSH tunnel is placed between client and server.

You probably won't find libraries for "FTP over SSH" because typically the tunnel is set up by running an SSH command, and once it is set up, clients and servers don't need to know about the tunnel; they just open ports and transfer data they way they would without a tunnel.

community wiki

"You probably won't find libraries for 'FTP over SSH'" - there is at least one :-). Rebex File Transfer Pack (rebex.net/file-transfer-pack/default.aspx) is capable of running the FTP over SSH channel. It's possible because our SshSession class can be used as (kind-of) proxy for Ftp class (technically it can be used as class factory for creating the communication sockets for the FTP component). It's even capable of running such weirdness as the SFTP protocol over the SSL channel (instead of over SSH), however we have not found any server which support it.

Commented Sep 24, 2009 at 0:47

Basically, there are the following file transfer protocols around:

FTP – the plain old FTP protocol that has been around since 1970s. The acronym stands for "File Transfer Protocol". It usually runs over TCP port 21.
SFTP – another, completely different file transfer protocol that has nothing to do with FTP. SFTP runs over an SSH session, usually on TCP port 22. It has been around since late 1990s. The acronym actually stands for "SSH File Transfer Protocol".
FTP over SSH - 1) possible, but extremely rare example of FTP protocol tunneled through a SSH channel 2) incorrectly named SFTP

Disclaimer: I work for Rebex

1,343 1 1 gold badge 21 21 silver badges 24 24 bronze badges answered Sep 24, 2009 at 0:31 Martin Vobr Martin Vobr 5,835 2 2 gold badges 38 38 silver badges 43 43 bronze badges

SFTP is actually another protocol that runs over SSH - an extension of SSH if you like. People tend to use SFTP rather than tunnelling FTP over SSH.

For comprehensive SFTP support in .NET try edtFTPnet/PRO. It's been around a long time with support for many different SFTP servers.

answered May 19, 2009 at 2:36 Bruce Blackshaw Bruce Blackshaw 1,006 1 1 gold badge 8 8 silver badges 10 10 bronze badges

Here's a simple explanation:

FTPS = FTP + SSL
SFTP = SSH using an FTP program

answered Jan 13, 2020 at 17:34 Tony Herman Tony Herman 31 1 1 bronze badge

SFTP is it's own protocol. FTP over SSH is using FTP once you're connected via SSH.

answered Jan 13, 2009 at 19:41 jacobangel jacobangel 6,976 2 2 gold badges 35 35 silver badges 35 35 bronze badges

SFTP stands for SSH File Transfer Protocol. It's not FTP over SSL and not FTP over SSH. SFTP is standardized in RFC 4253.
FTP stands for File Transfer Protocol which is defined by RFC 959 and latter additions. FTP is very popular but not secured. Therefore FTP over SSL was introduced and it's called FTPS or FTP/SSL.

For authentication SFTP use SSH keys, while FTPS use X.509 certificates.

answered Jul 10, 2014 at 8:25 user3766626 user3766626

FTP over SSH is plain FTP protocol tunneled through SSH. SFTP is the file transfer mechanism offered by SSH and it's a completely different protocol. I haven't seen anybody using FTP over SSH.

community wiki

SFTP (SSH File Transfer Protocol) may be a secure file transfer protocol that runs over the SSH protocol. It secures the perform and authentication of the SSH.

This further layer of protection guarantees that the affiliation is genuine with certificates in order that the shopper and also the server will form a stable and reliable connection. This offers an inexpensive degree of security as long because the acceptable certificates are in order.

it's continually counseled that you just have a certificate on your web site to tell guests of its validity and ensure a connection, however if this can be not practical, for example, if you're uploading files to a brand new web site that you just are presently operating on, SFTP may well be the simplest alternative If you hook up with a server that uses SFTP when you’ve been a devoted FTP user for many years, you will be slightly stunned at the speed drop compared to what you’re used to.

this can be as a result of there's plenty of additional packet ANd cryptography going down throughout an SFTP transfer that's not gift whereas mistreatment FTP. There are some things price sacrificing for speed, however safety is maybe not one of them.