FTP

Breaking changes

• FTPS is now the default. Use the tls option to choose explicit, implicit or none.
• Windows servers, and any FTP server that does not support SITE CHMOD, now need skip_permissions=true on the destination.

Security

• Connections are encrypted with FTPS by default, using explicit AUTH TLS.
• Plain FTP must be requested explicitly. tls=none is refused unless tls_insecure_no_verify=true is also set.
• Restores are contained to the destination directory. A snapshot entry whose path would resolve outside it is reported as failed and skipped.
• Temporary files written during a restore use unpredictable names.

New

• Restore sets the permissions of restored files and directories, including the setuid, setgid and sticky bits, using SITE CHMOD.
• The new skip_permissions option restores without setting permissions.