(OT) secure web updates from Windows

[Bill Campbell]

I have somebody who wants to be able to update a web site which I
have under a /home/$user/public_html directory to allow updating
with normal shell tools.  The only secure methods I know to allow
'Net access to this are sftp and ssh or perhaps webdav via a SSL
(https) connection.

We do not allow password authentication using ssh since I've had
problems with dictionary attacks on bad user passwords permitting
ssh access to user's directorys where an IRC ``bot'' is run.

I've played a bit with puttygen to generate public/private key
pairs, but haven't found the magic incantations that openssh-3.9p1
likes using putty (and I don't know that putty handles file
uploads in any case).

Any suggestions from folks who have to put up with Windows?

Bill
--
INTERNET:   bill at Celestial.COM  Bill Campbell; Celestial Systems, Inc.
UUCP:               camco!bill  PO Box 820; 6641 E. Mercer Way
FAX:            (206) 232-9186  Mercer Island, WA 98040-0820; (206) 236-1676
URL: http://www.celestial.com/

``It is surprising how much new stuff users find that developers never do.
You put a copy in front of a normal user and they find all these bugs that
you would think developers would find. The real users and developers are
completely different species as far as I am concerned.''
    --Linux creator Linus Torvalds