On 03/04/15 19:42, John Levine wrote: >>> The majority of the current FTP traffic appears to be from mirror >>> sites that would be better served using rsync. > >> the service for RFCs either. FTP is antiquated. In as much as we are >> encouraging everyone to encrypt everything, most FTP clients and servers >> lack that support. > > Since it's anonymous retrieval of public information, I suppose a bad > guy could do traffic analysis, but if it's mostly mirrors, they'll be > fetching everything so it won't reveal much. That sounds right to me. > The main problem with turning FTP off is that stuff will mysteriously > stop working. I wonder if it'd be possible to look at the FTP logs > and see if there are people we recognize, and if so contact them and > ask how hard it would be for them to use rsync instead, to limit the > mysteries. I think maybe the thing to do is to turn if off but with a willingness to turn it back on (perhaps temporarily) if it turns out to break something badly. I'm fine with whoever are the correct powers-that-be making those decisions. (But very glad to see this checked with the community first.) S. > > R's, > John > > >