4 ms·

We can't use SFTP internally because of policies around encryption, so a lot of our stuff uses FTP to move data around.

• BillinghamJ 11y ago
  uh, is the policy that encryption isn't allowed? SFTP is encrypted, FTP isn't.
  • w8rbt 11y ago
    Many security groups in corporations inspect network traffic for malicious activity. Encryption prevents this, so policies or technical measures may be introduced to ban or limit its use. As a side note, several years ago, I had a friend who worked for a small research company that had a ban on encryption software. Installing or using PGP on a company computer would be cause for termination. I expect to see these ideas become more mainstream. In future, companies may only allow certain encryption technologies on their networks/nodes (ones which they hold keys for).
  • dingaling 11y ago
    > is the policy that encryption isn't allowed? Where I worked moving encrypted files over plain FTP was preferred by the business clients because they controlled the encryption passphrases, whereas using SFTP would require operations support, as ops own certificates and encrypted service endpoints. Much easier for a business user to encrypt a file on their computer using PGP and FTP it to the recipient, passing the passphrase out of band, than raise a service request to pick-up and transmit a file dropped onto a specific egress zone.