Take the 2-minute tour ×
Ask Different is a question and answer site for power users of Apple hardware and software. It's 100% free, no registration required.

How secure is the file sharing feature for use over WAN on an Airport Extreme? i.e. Are the content and/or passwords encrypted when accessed over the Internet?

share|improve this question

migrated from serverfault.com Dec 29 '11 at 1:02

This question came from our site for professional system and network administrators.

1 Answer 1

AFP (Apple Filing protocol) is unencrypted for the most part. Authentication is the only place where encryption is used, and it is negotiated between client & server. I believe that the Airport Extreme offers DHCAST128 and DHX2 UAMs (User Authentication Methods), both of which encrypt the user's password with CAST-128 (they differ in how they come up with the key used to do the encryption, DHX2 is better).

AFP with either of the above UAMs is susceptible to Man in the Middle attacks and I would not recommend it for use over the Internet. AFP can be tunneled through SSH for better security, but I don't think the Airport Extreme supports that usage.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.