FTPS adds TLS to FTP's control and data channels. Its weaknesses are the TLS configuration (unvalidated or self-signed certificates that enable man-in-the-middle, and deprecated ciphers and protocol versions that permit downgrade) layered over the same anonymous-access and brute-force issues as plain FTP.
Subtopics#
- Weak TLS and certificate validation: interception and downgrade.