On 16-Nov-2016, u wrote: > Well, dput is supposed to work with SFTP simply by specifying > "method = sftp" in any dput config file such as ~/.dput.cf.
That has never been the case for the ‘dput’ package. This bug is a request for a new feature that ‘dput’ doesn't yet have. > However, when specifying this method, dput throws this error: > "Unknown upload method: sftp" Right, because the feature is not yet implemented :-) > Hence, my question actually is: why can't Debian's dput work with > SFTP now? If you mean: why can't Dput do that now? The answer is: because the feature is not yet implemented. If you mean: why not just add that feature the same way Ubuntu has done? The answer is, because this feature and others are better addressed by a differently designed API. I'm not keen to add more code to the legacy API for that reason. > Currently, I'm able to use dput only using FTP, which seems slightly > insecure to me :) You're right, it is. There are better methods already: the ‘https’ method is more secure, and the ‘scp’ method more secure still. I can see the desire for ‘sftp’ support, and it is on the To Do list. Since it's not causing any problems in Debian, though, it is waiting for more extensive changes in Dput before it can be considered. -- \ “The reward of energy, enterprise and thrift is taxes.” | `\ —William Feather | _o__) | Ben Finney <bign...@debian.org>
signature.asc
Description: PGP signature
