X-Git-Url: https://ruderich.org/simon/gitweb/?a=blobdiff_plain;f=lftp%2Frc;h=f94041b25c7317f6b82b1217d1a91f422b079267;hb=cabf61c0763cf91a7b4fe48ec1e0775ae12e7d5e;hp=9fee20192ea1065228965c59115b0bfc77ae1049;hpb=58eb0aaacee47e33256c7b2590df59bd2c86dbe5;p=config%2Fdotfiles.git

diff --git a/lftp/rc b/lftp/rc
index 9fee201..f94041b 100644
--- a/lftp/rc
+++ b/lftp/rc
@@ -21,16 +21,30 @@
 # Display all files (including hidden ones) with `ls`.
 set ftp:list-options -a
 
-# Store passwords in the bookmarks file.
-set bmk:save-passwords yes
-
 # Use a colorized prompt. Hostname in green, current directory in blue.
 set cmd:prompt "lftp \[\e[01;32m\]\h\[\e[00m\]:\[\e[01;34m\]\w\[\e[00m\] % "
 
+
+# Store passwords in the bookmarks file.
+set bmk:save-passwords yes
+
 # No retries after a failed connection, prevents (long) delays e.g. for
 # automated jobs.
 set net:max-retries 1
 
+# If SSL is used make sure the data connection is encrypted as well. This
+# should be the default behavior!.
+set ftp:ssl-protect-data yes
+set ftp:ssl-protect-fxp yes
+# Same for control connections (default).
+set ftp:ssl-protect-list yes
+# Make sure SSL is not dropped after a successful login (default).
+set ftp:ssl-use-ccc no
+# And verify the certificate and hostname, otherwise encryption doesn't matter
+# (default).
+set ssl:check-hostname yes
+set ssl:verify-certificate yes
+
 
 # ALIASES