SFTP (SSH File Transfer Protocol) transfers files securely over a Secure Shell (SSH) connection; despite the name, it is a separate protocol from the older FTP.
SFTP runs on Secure Shell (SSH). RFC 4251, a technical specification from the Internet Engineering Task Force (IETF), describes SSH as a protocol for logging in to remote computers and using other network services securely across an insecure network. An IETF draft published in October 2001 says SFTP provides secure file transfer over any reliable data stream and calls it the standard file transfer protocol for version 2 of SSH.
SFTP itself has not been published as an RFC: the IETF draft series stopped at revision 13 in July 2006 and has since expired. The older FTP was set out in RFC 959 in October 1985. As RFC 2228 points out, FTP in that original form made no provision for encrypting commands, replies or transferred data, and it sent usernames and passwords in plain text. FTP over TLS (Transport Layer Security), described in RFC 4217, adds security and authentication to FTP by another route; it is not SFTP either.
For our own software, SFTP is the second standard way of connecting to existing systems, alongside APIs API An API (application programming interface) is a defined set of functions and rules that lets one piece of software use the features or data of another system or service. Read in the glossary → . In a proof-of-delivery project for a pharmaceutical logistics Pharma logistics Pharma logistics is the term we use for storing, transporting and delivering medicinal products and other pharma-sector goods, such as promotional material and supplies for patients. Read in the glossary → company, for example, our software collects proofs of delivery and order data over SFTP and, for one client, sends the proofs straight to that client's own server. The existing warehouse management system WMS WMS stands for warehouse management system; according to the short description of VDI 3601, its task is to manage and optimise a company's internal storage and transport systems. Read in the glossary → stays as it is.
Where the term appears
See also
-
API
An API (application programming interface) is a defined set of functions and rules that lets one piece of software use the features or data of another system or service.
Cross-cutting
-
Interface
An interface is the point at which two systems, programs or components meet and exchange data; the word also covers the user interface between a person and software.
Cross-cutting
-
Business application
In general terms, a business application is software used to perform or support business functions.
Pharma
-
WMS
WMS stands for warehouse management system; according to the short description of VDI 3601, its task is to manage and optimise a company's internal storage and transport systems.
Pharma
Sources
-
draft-ietf-secsh-filexfer-02: SSH File Transfer Protocol (Internet-Draft, Oktober 2001) (opens in a new tab)
IETF, Secure Shell Working Group (secsh) accessed
-
RFC 4251: The Secure Shell (SSH) Protocol Architecture (Januar 2006, Standards Track) (opens in a new tab)
IETF (RFC Editor) accessed
-
draft-ietf-secsh-filexfer-13: SSH File Transfer Protocol (Status-Seite) (opens in a new tab)
IETF Datatracker accessed
-
RFC 959: File Transfer Protocol (FTP) (Oktober 1985) (opens in a new tab)
IETF (RFC Editor) accessed
-
RFC 2228: FTP Security Extensions (Oktober 1997, Standards Track) (opens in a new tab)
IETF (RFC Editor) accessed
-
RFC 4217: Securing FTP with TLS (Oktober 2005, Standards Track) (opens in a new tab)
IETF (RFC Editor) accessed