> is the policy that encryption isn't allowed? Where I worked moving encrypted files over plain FTP was preferred by the business clients because they control

> is the policy that encryption isn't allowed? Where I worked moving encrypted files over plain FTP was preferred by the business clients because they controlled the encryption passphrases, whereas using SFTP would require operations support, as ops own certificates and encrypted service endpoints. Much easier for a business user to encrypt a file on their computer using PGP and FTP it to the recipient, passing the passphrase out of band, than raise a service request to pick-up and transmit a file dropped onto a specific egress zone.