At the moment I am working on a personal 3DGS developed CMS/DATABASE that will allow me to control a custom website template and manage all data/uploads directly from the program without using php/sql (Only FTP).

HTTPS and FTPS are currently not available and I need to find another way to secure the transfer. I've noticed that the standard FTP function will connect to my SSH. Examples : (ssh.host.com) - (host.com@ssh.host.com) It will connect, upload files, and seems to be working.

But....Is this working? Is SSH encrypting the transfer (SFTP) or is 3DGS still sending unsecured data? Is there a way I can tell if it's actually securing the transfer? or do I need some type of local data to help with the transfer?

NOTE : I am aware of SSH vulnerabilities, but I need something to help encrypt the name and password. Since this is for personal use, I'm not worried about the User name and password being compiled in the custom editor. I just need to make sure they are being encrypted when transferring data with FTP through SSH.