4 ms·
I worked on the ACH system at the Federal Reserve Bank. When you're getting multi-gigabyte files from the Social Security Service daily that have many millions
by nickbauman 9y ago
I worked on the ACH system at the Federal Reserve Bank. When you're getting multi-gigabyte files from the Social Security Service daily that have many millions of transactions in them, you appreciate the NACHA format's compactness (~100 bytes each tx). We never transmitted files on insecure protocols like FTP, though.
- Cieplak 9y agoEvery bank I've worked with uses SFTP rather than FTP.
- lavezzi 9y agoMost i've seen use Connect:Direct Secure Plus
- Cieplak 9y agoAh, yes, for interbank reconciliation and talking to the Fed. Typically not for merchant services related ACH applications.
- jimktrains2 9y agoJust to be pedantic. SFTP (file transfer subsystem of SSH) or FTPS (FTP + TLS)? I mean, either is fine, I would just imagine that if it was FTP at some point, moving to FTPS wouldn't be unreasonable.
- pfarnsworth 9y agoSFTP means exactly SFTP, and it's not ambiguous. FTPS is a completely different protocol.
- wiredfool 9y agoTo you, maybe. To the rest of the world, you have to check and be explicit about it.
- oso2k 9y agoSame here when I worked at a Mortgage company. SFTP everywhere.
- sigjuice 9y agoDid they use sftp from the OpenSSH package or was it some sort of commercial variant?
- mdnormy 9y agoJust sharing mine. My company customer consist of major international financial establishment. As some simply can't go with certain open source project due to compliance, we settled with Tectia SSH[1]. Similar story with VPN and other security-related stuff. Everything is SFTP with them. Even API json response lol 1. https://www.ssh.com/products/tectia-ssh https://www.ssh.com/products/tectia-ssh
- oso2k 9y agoLinux/Ruby systems used openssh sftp. Windows Server/SQL Server used some POS SQL Server SSIS sftp plugin.
- PeterisP 9y agoI've worked on a similar system running on plain FTP (wasn't SFTP created just in something like 2000? So that it wouldn't have been an option back when the system was created) but it had no obvious security flaws because of this - all the FTP handled was the exchange of encrypted&signed files with encrypted&signed ACK messages, the same system might have been run over something like plain email.