I think that SFTP means SSH is added to FTP, so tunneling is required for it to be called SFTP, otherwise it's just FTP.
Let's look at two examples:
1) If I fill out SFTP session login details, and try to login without going to "Advanced..." to put a check mark at Tunnel > Connect settings, the connection goes through successfully without mention of any tunneling.
2) If I go to "Advanced..." > Connection > Tunnel > Connect through SSH Tunnel and mark that box then fill in tunnel login details, then login, it mentions I connected through a tunnel.
In Example #1, is encryption present because login authentication does not mention a tunnel?
Does lack of a tunnel (required for encryption?) mean it's no longer SFTP, but actually FTP?
If so, has my login password already been compromised to the Internet? Suppose I already had a master password set (which I did), will my login password still be compromised?
Is Example #2 (enabling the tunnel) required for sftp to, in fact, be stfp? Or am I doing something like double encryption (adding extra overhead)?
I looked all over the Internet and this website, but couldn't find anything on this... so answers would be appreciated! I apologize for all the questions, just answer them quickly one by one. :wink: