Wurdearring: 4 fan de 5 stjerren

troch kob op Sept. 20, 2014 · permalink

I am new to the program. UI looks neat, and common features are fairly complete. The debug trace is handy to investigate some protocol problems with the server.
I tested out FTPS (implicit) - works fine against the server's self-signed certificate. On the other hand, SFTP (which also works fine) appears to only support SHA1 key exchange and HMAC at the highest level. It would be nice to be able to also handle DH-SHA256 and ECDH-SHA2 over secp256k1 for key exchange and HMAC-SHA2-256 for data authentication.

I don't have any knowledge about the security of the addon - in addition to code robusness (which I have not reviewed, and it is a valid question for a any secure application), being integrated info Firefox which takes on quite a beating from external vectors, including the possible dangers of XSS, I don't know yet whether to use this addon or a dedicated client like winscp.

Using 2.0.20 on FF V.32 under WIN7SP1 32b.