FTP traffic does not provide encryption in the data transfer process, and the data transfer between
the sender and receiver is in plain text. FTP stands for File Transfer Protocol, and it is a standard
network protocol for transferring files between a client and a server over a TCP/IP network. FTP uses
two separate channels for communication: a control channel for sending commands and receiving
responses, and a data channel for transferring files. However, FTP does not encrypt any of the data
that is sent or received over these channels, which means that anyone who can intercept the
network traffic can read or modify the contents of the files, as well as the usernames and passwords
used for authentication. This poses a serious security risk for the confidentiality, integrity, and
availability of the data and the systems involved in the file transfer. Therefore, FTP is not a secure way
to transfer sensitive or confidential data over the network. Reference:
Network Defense Essentials Courseware, EC-Council, 2020, pp. 3-31 to 3-32
What is FTP, and Why Does It Matter in 2021?, Kinsta, January 4, 2021
FTP Security, Wikipedia, February 9, 2021