3 ms·
Is that more common than HTTPS, simpler, and a standard feature of FTP? I daresay not. In other words, you're making up a convoluted scenario and pretending it'
by Piskvorrr 9y ago
Is that more common than HTTPS, simpler, and a standard feature of FTP? I daresay not. In other words, you're making up a convoluted scenario and pretending it's still plain FTP, even though your toolchain got far more esoteric.
- striking 9y agoThat's how banks send records to each other, iirc. Instead of changing the protocol, they just wrapped the data.
- aianus 9y agoAt least in Canada the last bank integration I worked on was FTPS (FTP over SSL). Files were otherwise in plaintext with account numbers and everything.
- Operyl 9y agoThere were a few blog posts posted here from a payroll company not too far back. They explicitly kept using the term “SFTP” so I have some hope that at least a good portion of banks aren’t completely broken. EDIT: http://engineering.gusto.com/how-ach-works-a-developer-perspective-part-1/ http://engineering.gusto.com/how-ach-works-a-developer-persp... I was misremembering a bit. They said “secure FTP” and then just said FTP thereafter.
- user5994461 9y agoSFTP is file transfer over ssh. The name is a misnomer.
- Operyl 9y agoI know, hence my edit. In my mind I read secure FTP -> SFTP, damn brain. But after rereading, I'm thinking they meant FTPS.
- stephenr 9y agoSecure ftp may mean ftps, ftp over tls/ssl.
- Operyl 9y agoYep, down below I already made that observation. "I know, hence my edit. In my mind I read secure FTP -> SFTP, damn brain. But after rereading, I'm thinking they meant FTPS. "
- prophesi 9y agoI wish GPG wasn't so esoteric of a tool, considering our email protocol situation.
- Klathmon 9y agoIt's esoteric because proper key management is a fulltime job at best. And every attempt at doing key management better is met with hostility from many in the community (rightfully or otherwise) as they tend to sacrifice "absolute security" in the name of greater "usable security" (often by centralizing the trust system in some way).
- prophesi 9y agoAye, it's a constant battle of security versus usability. I'm on the centralizing boat, hoping that Keybase will prevail.
- tentaTherapist 9y ago"Proper key management is a full-time job" is such a surprisingly accurate description of the situation! <3
- deleted 9y ago[deleted]