4 ms·
Our company receives sensitive data from external members by email, which is considered insecure. So we need to buy or create our own solution to receive these
by gressquel 9y ago
Our company receives sensitive data from external members by email, which is considered insecure. So we need to buy or create our own solution to receive these files encrypted.
Does anyone here have github repo to such a solution?
- kuschku 9y agoYou could use the system the big US banks use for that: FTPS or SFTP. Alternatively, you could simply set up a cloud share they can upload files to, e.g. a Seafile instance, and have them link it in the email. If you want to go fancy, you can build your own HTTPS protected upload form. Or you can use OpenPGP / GPG / PGP for your emails. This isn’t exactly rocket science.
- JdeBP 9y agoWhilst the point about this stuff being well known is sound, I shall just point out that FTPS alone is quite likely (according to circumstances of course) to be not enough. I know of at least one system that already used FTPS for a decade or so that now has to be modified to use GPG encryption as well, for GDPR compliance. Security of data once they have arrived is as important as security of data that are in transit.
- tombrossman 9y agoScott Helme has a self-hosted contact form which uses his PGP key to encrypt messages from website visitors, with a link to his 'how to' blog post just below the form: https://scotthelme.co.uk/contact/ https://scotthelme.co.uk/contact/
- darkport 9y agoYou're e-mails are probably using TLS (I would check), which is the same as HTTPS. SFTP would be ideal.