Today in “Adobe Hates You” news

It has come to my attention that there exists a “no-code” website creation tool from Adobe called Muse.

Muse, like countless such tools before it, purports to allow a user to create and manage a site without writing any code. This is a laudable goal.

As with most such tools, the work is done locally, and the tool only sends the files to the web server when the user is satisfied they’re ready. The actual transmission of the files from the user’s machine to the web server is hidden.

Fifteen years ago, we could be pretty certain that the transmission was happening using FTP, a venerable protocol that has fallen COMPLETELY from favor because it’s staggeringly insecure. Nothing about it is encrypted — not even usernames and passwords. This means any fool with a sniffer can own your web site, which is generally considered a problem.

For this reason, FTP usage has dropped off considerably in recent years; I don’t think I’ve run a server with FTP enabled in over a decade. There is, however, a work-alike protocol that leverages the excellent SSH libraries to create a secure, encrypted transmission channel. It looks like FTP and acts like FTP, but under the hood it’s secure. This is a good thing. SFTP has almost completely replaced FTP as a result.

And this is why we know Adobe hates you, because Muse, a tool introduced in 2012, does not support anything but FTP, and they’re not planning to add SFTP any time soon. Their actual advice is to use an external FTP client if you need a secure channel.

Whiskey. Tango. Foxtrot.

Dear Adobe: DIAGF.

Comments are closed.