Ftp-WG: status of rfc 2228

hello all,

i'm new to the list.

very recently, i've taken an interest in the status of rfc 2228 as i wish to implement some means of user authentication, integrity protection, and optional data encryptiong to an existing ftpd implementation.

i was wondering if anyone knew which ftp implementations currently support the proposed security extensions.

and finally, are there any thoughts on combining the control connection and data connection?  in my eyes, this would eliminate the bounce attack and make ftp less of a problem for nat'd connections and firewalls.

thanks for any feedback


abe