VessOnSecurity on Nostr: JFC! Apparently, it is not possible to download a file from a contemporary, properly ...

JFC!

Apparently, it is not possible to download a file from a contemporary, properly configured FTP server using FTPS and only internal Windows tools.

- ftp.exe doesn't work, because it doesn't support FTPS.

- curl.exe doesn't work, because it is compiled with Microsoft's internal Schannel library, instead of with OpenSSH, and that doesn't support data session rotation (or whatever the server setting is called that prevents session hijacking - it's been around for more than a decade, in contemporary FileZilla it cannot even be disabled any more).

- .NET calls fail because System.Net.FtpWebRequest is "obsolete, not supported, not replaced by anything else" and doesn't support this anti-session hijacking anyway.

So, the only options are (all bad):

- Use 3rd-party tools (not the system curl.exe, WinSCP, or whatever);

- Reduce the security of the server by installing an obsolete version of it (bad by itself) AND turn off a security option in it;

- Implement the full FTPS protocol yourself using sockets;

- Give up.