Editing Trivial File Transfer Protocol (section)

==Security considerations==

TFTP includes no login or access control mechanisms.  Care must be taken when using TFTP for file transfers where authentication, access control, confidentiality, or integrity checking are needed.  Note that those security services could be supplied above or below the layer at which TFTP runs. Care must also be taken in the rights granted to a TFTP server process so as not to violate the security of the server's file system.  TFTP is often installed with controls such that only files that have public read access are available via TFTP. Also listing, deleting, renaming, and writing files via TFTP are typically disallowed. TFTP file transfers are not recommended where the inherent protocol limitations could raise insurmountable liability concerns.<ref>RFC 7440, page 7.</ref>