.png "Commander"){kind=icon}
@Trevor to answer your query in one line - YES and why ? because it was deprecated in 2019 by OpenSSH and hence sftp is now the new normal
now the real backstory ........
There are several security weaknesses in many scp clients. These flaws allow a malicious server to attack a user's computer.
A major issue is that many clients don't check if the files they receive are the ones they requested. This problem dates back to scp's predecessor, rcp, from 1983.
This, combined with other client flaws, means an attacker can do a few things:
- Write arbitrary files to your target directory.
- Change the permissions of that directory.
- Fake the client's output, hiding what is really happening.
For example, a malicious server can secretly put a file like .bash_aliases into your home directory when you try to copy files from it. To hide this extra transfer, the server sends special code to your screen that makes the text vanish. This can also happen with a Man-in-the-Middle attack, where the attacker intercepts your connection.
Refer the bomb here : https://access.redhat.com/security/cve/cve-2019-6111
only SFTP can set file permissions (like using the chmod command), giving you more control over what users can do to specific files.
sftp is also more reliable because it confirms every single data packet it receives. This acknowledgment process makes it far less likely to lose data compared to scp, which does not have this feature.
So, yes if scp was safer it would not have been deprecated !
