in reply to Re: CGI/FTP security question
in thread CGI/FTP security question

Thanks, I check those modules out...

But I thought TFTP was meant to be done over UDP? Some files might be too big to be sent back and forth reliably with UDP. Or am I thinking of another FTP variant? Or is it acceptable to do TFTP over TCP, like you suggested?

Replies are listed 'Best First'.
Re: Re: Re: CGI/FTP security question
by hardburn (Abbot) on Dec 10, 2003 at 21:51 UTC

    Yes, TFTP is normally done over UDP, but there's nothing that says it must be. In fact, IIRC, the RFC explicitly states that other transport layers are OK. Be sure to check out some the extentions to it that can improve efficiency.

    ----
    I wanted to explore how Perl's closures can be manipulated, and ended up creating an object system by accident.
    -- Schemer

    : () { :|:& };:

    Note: All code is untested, unless otherwise stated

      Yes, TFTP is normally done over UDP, but there's nothing that says it must be. In fact, IIRC, the RFC explicitly states that other transport layers are OK. Be sure to check out some the extentions to it that can improve efficiency.

      A quick google found RFCs 783, and 1350---does it having only two RFCs associated with it sound right to you?

      Also, does it support sessions? (I'd think not), because I would guess that multiple files will need to be sent with some requests--files that I would prefer not to waste time authenticating over again

      Actually, I could probably make it a session based tftp... but...

      I guess, I am more confuse now than before--I have much to grok.

        . . . does it having only two RFCs associated with it sound right to you?

        I think there are a few others that are more "expermintal extentions". http://www.rfc-editor.org should be able to find them.

        Also, does it support sessions?

        Not in the protocol as defined, though sessions don't make sense in a protocol primarily used over UDP. Since you'll probably be doing it over TCP, it's probably worth adding.

        Anyway, TFTP was just a suggestion. It may or may not be too much work to modify for your project.

        ----
        I wanted to explore how Perl's closures can be manipulated, and ended up creating an object system by accident.
        -- Schemer

        : () { :|:& };:

        Note: All code is untested, unless otherwise stated