Replace ftp with sftp?

[MikeJRamsey]

What is the conventional wisdom? Should I remove the ftp package that came standard with ubuntu 9.10 (desktop) with sftp? Bastille recommends this. What does the Ubuntu team say? --Thank you, --Mike Ramsey

[RegUB]

Depends on the sensitivity of your data. ftp is unencrypted so is less secure.

[MikeJRamsey]

Thank you for replying.

While data sensitivity is a factor, I am more concerned about an attacker using a clear-text-takeover tool like Hunt or ettercap. I don't plan on using FTP much but things could change and I have time now to further lock down my system.

Surely other folks have considered this question. I am just trying to avoid all the tedious trial and error. :-)