Secure FTP

The best of both worlds...

Web Browser Simplicity &
Stand-alone Software Compatibility

1. FTP Today installs a server-side component that accepts encrypted connections using FTPS (SSL).  The license for this software retails for $250, but FTP Today has a volume arrangement that allows us to provide it to our customers for only $50 (see setup fee).
    
2. The server-side installation includes the creation of a self-signed
   SSL certificate. [Certificates signed by a trusted root authority such as Thawte are also available for a standard issuance fee.]
    
3. FTP Today also installs our Secure Edition Web FTP Client, so that your users can simply use their web browser to establish an FTPS connection and transfer files securely. [Client-server connections can also be established by users with their own licensed FTPS-client software, such as WS_FTP Pro or CuteFTP Pro.]

Costs for the Secure Edition add-on:

1. One-time $100.00 $50.00 setup fee (a $250 value) to cover the cost of the FTPS components that FTP Today will install on your FTP Today VDS.
    
2. $10 per month add-on charge.

Advantages:

1. FTP Today Secure Edition use 128-bit SSL encryption
    
   • Username and password are encrypted, as opposed to being sent over the Internet as clear text, as with standard FTP.
      
   • Data files are sent over an encrypted channel as well.
     Note - This is the default setting on our we-based client software, but may be user-selectable on stand-alone client software.
      
   • The above means that no one can snoop or sniff out your login information or the contents of your data files on the public Internet.
      
2. FTP Today Secure Edition is web-based, and therefore requires no software to be installed by the end user.  Everything that is needed loads quickly and seamlessly in their web browser window, and is automatically unloaded when that window is closed.
    
3. FTP Today Secure Edition is also third party FTPS client compatible with users who have their own FTPS client software, such as WS_FTP Pro or CuteFTP Pro.
    
   • Many standalone FTPS client software packages can automate and schedule unattended transfers.
      
   • Some of your users may already have FTPS client software and prefer to use it.  The use of third party software is completely optional, since FTP Today Secure Edition includes our proprietary web browser interface.
      
4. Users are jailed to their private FTP folders based upon username.
    
5. Activity log keeps track of all user activity.
    
6. Can be combined with FTP Today Custom Edition  for a branded, customizable web-based FTP interface.  Click here to learn more.

Disadvantages: [NONE]

A poor choice compared to SSL...

Some standalone FTP client software offer SFTP.  SFTP is not a generic acronym for "Secure File Transfer Protocol"; The "S" stands for encryption using Secure SSH (Secure SHell).  While this is technically still 128-bit encryption, that is where the similarity to the above methods ends.

Disadvantages: [MAJOR]

1. Your end users will have to license and install SFTP software on their computers.
    
2. You may also have to support your end users in installing, configuring and using their SFTP software.
    
3. Most SFTP server deployments use OpenSSH/SFTP on the server, which does not jail a user inside of a particular folder based on their username & password authentication.
    
4. OpenSSH/SFTP keeps no log of user activity.  There is therefore no audit trail whatsoever.

FTP Today sees no advantages in deploying SFTP on your hosting account, therefore we do not recommend this solution except in rare cases where you are already using SFTP over SSH2 or some client of yours forces your hand. 
Please contact Sales to discuss costs and deployment of SFTP in lieu of FTPS.

Not designed for File Transfer applications.

Disadvantages:

1. HTTPS is used in hosting websites with e-commerce applications.  This is great for securing order forms while customers enter credit cards. Functions like user-authentication and folder privacy are not best handled by HTTP or HTTPS.
    
2. The HTTPS protocol is not natively meant for transferring files *.  It is meant for displaying web content over a secure connection from a web browser to a web server.

* FTP Today offers an FTP-over-HTTPS (secure tunnel) for special cases where the client-side network is behind a firewall that blocks FTP and FTPS ports and there is no option to configure the firewall.  Contact us about FTP-over-HTTPS.