Re: Secure file transfers

[Wyman Miles <wm63 () CORNELL EDU>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


- --On Monday, May 07, 2007 11:11 AM -0700 Samuel Young
<syoung () LASIERRA EDU>
wrote:

> I came across this company called SpeedLink from Singapore.
> They seem to have a very interesting file transfer paradigm.
>
> www.speedlinkworks.com
>
> Basically, they use their own encryption algorithm.  The file is uploaded
> to  a secure server so the authenticated recipient can obtain the file.

Web-based drop-off location or something? (I can't reach the link)
Cornell's got a homegrown app called dropbox that does what Rice's
homegrown app, webfile did, that does what many campuses have built.

Easier and safer to build your own with an SSL Web server than contract
someone else to store your content.

If I'm going to use some 3rd party HTTPS drop-off location, I'm going to
encrypt the content first.  And if I'm going to bother to encrypt the
content first, I may as well just use any number of protocols to move it
around.

Wy



> God bless,
> Sam Young
> CIO
> La Sierra University
>
>
> -----Original Message-----
> From: Matthew Keller [mailto:kellermg () POTSDAM EDU]
> Sent: Monday, May 07, 2007 10:39 AM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: Re: [SECURITY] Secure file transfers
>
> On Mon, 2007-05-07 at 08:54 -0400, Theresa M Rowe wrote:
> > We've been getting a push back from some vendors that "standard FTP" is
> > secure enough.
> > We've been saying it isn't good enough.
>
> Find new vendors. The ones you're working with have demonstrated that
> they aren't competent enough to protect your data.
>
> --
> Matthew Keller
> Information Security Officer & Network Administrator
> Computing & Technology Services
> State University of New York @ Potsdam
> Potsdam, NY, USA



Wyman Miles
Senior Security Engineer
Cornell University, Ithaca, NY
(607) 255-8421
-----BEGIN PGP SIGNATURE-----
Version: Mulberry PGP Plugin v3.0
Comment: processed by Mulberry PGP Plugin

iQA/AwUBRj9vc8RE6QfTb3V0EQKnKwCgyBJ4hTof77wF2wQ2K4Vh+uloWX8AoJbt
9JQAiarDM3Dwome3sQshrgiy
=yiuX
-----END PGP SIGNATURE-----