2014-05-19: Advisory FTP Rush

A user cannot recognize an easy to perform man-in-the-middle attack, because the client does not validate the X.509 certificate from the FTP server. In an untrusted networking environment (like a Wifi hotspot), the current FTP AUTH TLS connection with FTP Rush should be classified as not encrypted. For more information on the security weakness, check Micha Borrmann's advisory.