Hacker News new | ask | show | jobs
by creshal 3760 days ago
If that client is a single person, sure. If the client is a 500 person organization where half need access to the server, I can see why people would prefer FTPS with a certificate from their internal CA.
1 comments

You can do SSH certificates that can sign and revoke keys. For some reason, most people assume TLS when you mention the word certificate. Read the CERTIFICATES section in ssh-keygen(1).
True, but you still need to build your own infrastructure to roll out the CA, vs. X.509, which is implicitly handled by all OSes.