FTP Encryption

General software, Operating Systems, and Programming discussion.
Everything from software questions, OSes, simple HTML to scripting languages, Perl, PHP, Python, MySQL, VB, C++ etc.
Post Reply
User avatar
TeddyTed
Regular Member
Posts: 224
Joined: Tue Mar 20, 2001 12:00 am
Location: Briarwood NY

FTP Encryption

Post by TeddyTed »

Hello everyone,

I've got a quick question.....
I support a small business in the health care industry, and they are getting ready to do business other another healthcare agency which requires small file transfers via FTP.
One of the requirement is that we provide a copy of our "public key for the FTP account".

This is the information as stated on the application document:

***Please remember to include your Public Key for the FTP account request. You will need to email the Key along with your completed questionnaire form.
Your account cannot be processed without it***

My understanding of this is that we will have to purchase an encryption key -presumably a public and a private matching keys.
I've been looking online and I haven't been able to find encryption key/certificates specifically for FTP. I see ssl certs for websites. Is that the same thing?
If so, any recommendations ?

I've looked at the following so far :

https://www.symantec.com/ssl-certificates
https://www.thawte.com/ssl/index.html



Thanks

TB
User avatar
TonyT
SG VIP
Posts: 10356
Joined: Fri Jan 28, 2000 12:00 am
Location: Fairfax, VA

Post by TonyT »

No purchases necessary.

I imagine Windows server operating systems are used at both ends. If so,
see this:
http://en.wikipedia.org/wiki/FTPS
and this:
http://en.wikipedia.org/wiki/Public_key_certificate

else use SSH (sftp) for file transfers, which is more secure.
No one has any right to force data on you
and command you to believe it or else.
If it is not true for you, it isn't true.

LRH
User avatar
YeOldeStonecat
SG VIP
Posts: 51171
Joined: Mon Jan 15, 2001 12:00 pm
Location: Somewhere along the shoreline in New England

Post by YeOldeStonecat »

If the other agency allows you to use a self signed cert...most clients can generate them
http://ask-leo.com/how_do_i_create_and_ ... h_ssh.html

Is this "MyAbility"?
MORNING WOOD Lumber Company
Guinness for Strength!!!
User avatar
TonyT
SG VIP
Posts: 10356
Joined: Fri Jan 28, 2000 12:00 am
Location: Fairfax, VA

Post by TonyT »

Also, if you cannot use a self-signed cert, then you'll probably have to purchase a Class 2 cert from someone like Verisign for about $400.00/year.
No one has any right to force data on you
and command you to believe it or else.
If it is not true for you, it isn't true.

LRH
User avatar
TeddyTed
Regular Member
Posts: 224
Joined: Tue Mar 20, 2001 12:00 am
Location: Briarwood NY

Post by TeddyTed »

YeOldeStonecat wrote:If the other agency allows you to use a self signed cert...most clients can generate them
http://ask-leo.com/how_do_i_create_and_ ... h_ssh.html

Is this "MyAbility"?



Thanks for the suggestions guys ! I will see if the self signed cert is good enough. If not i'll will go with a cert authority as suggested.


Thanks again !

TB
Post Reply