KB Article #101396
When using CCC mode, is my password sent in the clear?
When performing a secure FTP connection, using CCC (Clear Command Channel) mode causes commands to be sent in the clear. What about my username and password?
Only after the CCC command is issued are subsequent commands and their payloads sent in the clear. The username and password are sent before that, and so they are sent and received encrypted.