FTP is not the only way to upload files to a web server

RESOLVED FIXED

Status

P1
normal
RESOLVED FIXED
3 years ago
4 months ago

People

(Reporter: hamishwillee, Assigned: cmills, NeedInfo)

Tracking

Details

(URL)

(Reporter)

Description

3 years ago
:: Developer Documentation Request

      Request Type: Correction
     Gecko Version: unspecified
 Technical Contact: 

:: Details

There are a number of topics that suggest FTP is the "right" way to get files onto the web server. That is probably "dangerous" as a recommendation due to the inherent insecurity. I'd suggest minimally change recommendation to a secure method like SFTP, Rsync over SSH.
Topics affected include:
https://developer.mozilla.org/en-US/docs/Learn/Common_questions/How_much_does_it_cost
https://developer.mozilla.org/en-US/docs/Learn/Common_questions/What_software_do_I_need
https://developer.mozilla.org/en-US/docs/Learn/Common_questions/Upload_files_to_a_web_server#Getting_to_grips_with_an_FTP_client_FireFTP

I would also recommend rewording this from a "you must to it this way" to "one option". 

I'd also argue that file transfer is now a secondary method. The main approach that I'd recommend would be using github as an intermediary (much more common now continuous delivery is so popular)
(Reporter)

Comment 1

3 years ago
Actually, we mention github and rsync here: https://developer.mozilla.org/en-US/docs/Learn/Common_questions/Upload_files_to_a_web_server#Other_methods_to_upload_files

However they are considered "advanced", while Github is IMO "the default".
I agree that we should encourage SFTP rather than FTP by default, although we probably need to also cover regular FTP since there are still some sad servers which don't let you do SFTP.
Flags: needinfo?(cmills)
Flags: needinfo?(cmills)
Priority: P5 → P2
Assignee: nobody → cmills
Priority: P2 → P1
OK, I've rewritten all of these pages extensively so that they talk about using SFTP, warn about the dangers of using regular FTP, and also have more information about Rsync, GitHub with custom domains, etc. I think this is much better now. Does it work for you Hamish?

It's only taken me 2 years ;-)
Flags: needinfo?(hamishwillee)
Status: UNCONFIRMED → RESOLVED
Last Resolved: 4 months ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.