FTPES：它会加密数据吗？

Question

我目前使用 FTPES 连接到我的 FTP 服务器。

我想知道：当我连接到 FTP 服务器时，我的 PC 和服务器之间传输的数据是否加密？从日志中我可以看到它已通过身份验证。

这是我的服务器日志。从中，我可以判断它是否被加密？：

Status: Retrieving directory listing...
Command:    CWD MyS03
Response:   250 CWD command successful
Command:    PWD
Response:   257 "/MyFiles" is the current directory
Command:    PASV
Response:   227 Entering Passive Mode (37,58,52,72,195,33).
Command:    MLSD
Response:   150 Opening ASCII mode data connection for MLSD
Response:   226 Transfer complete
Status: Directory listing successful
Error:  Connection timed out
Error:  File transfer failed after transferring 155,893,760 bytes in 247 seconds
Status: Resolving address of 192.168.10.111
Status: Connecting to 11.135.156.147:21210...
Status: Connection established, waiting for welcome message...
Response:   220 (vsFTPd 2.3.5)
Command:    AUTH TLS
Response:   234 Proceed with negotiation.
Status: Initializing TLS...
Status: Verifying certificate...
Command:    USER darklord
Status: TLS/SSL connection established.
Response:   331 Please specify the password.
Command:    PASS ********
Response:   230 Login successful.
Command:    OPTS UTF8 ON
Response:   200 Always in UTF8 mode.
Command:    PBSZ 0
Response:   200 PBSZ set to 0.
Command:    PROT P
Response:   200 PROT now Private.
Status: Connected
Status: Starting download of /test.mov
Command:    CWD /rtorrent/data
Response:   250 Directory successfully changed.
Command:    TYPE I
Response:   200 Switching to Binary mode.
Command:    PASV
Response:   227 Entering Passive Mode (5,135,156,147,78,83).
Command:    REST 155893760
Response:   350 Restart position accepted (55893760).
Command:    RETR test.mov
Response:   150 Opening BINARY mode data connection for test.mov (197992856 bytes). 

Answer 1

一般来说，FTPS (FTPES) 并不一定意味着数据是加密的。虽然通常它是加密的（就像在这个特定的例子中一样）。

您的客户使用PROT P 命令请求私有数据通道保护级别。 私有级别意味着数据将受到完整性和机密性保护。

当服务器确认请求（响应200 PROT now Private）时，数据被加密（=机密保护）。

详情请见RFC 2228。