NANC 428

Update NPAC File Transfer Method from FTP to Secure-FTP

Origination Date :03/12/2008

Originator:Neustar

Description:

Business Need:

 The major reason for implementing SFTP versus FTP is security.  In FTP all data is passed back and forth between the client and server without the use of encryption.  Therefore data, passwords, and usernames are all transferred in clear text making them susceptible to eavesdropping, man-in-the-middle attacks, and integrity issues.  The implementation of SFTP (Secure File Transfer Protocol) is estimated to be a 6-12 month coordinated effort between NeuStar and the industry.

Final Resolution:

Backward Compatible:  YES

Implement SFTP, an interactive file transfer program.

SFTP is similar to FTP except that SFTP performs all operations in an encrypted manner.  It utilizes public key authentication and compression.  It connects and logs into a specified host, then enters an interactive command mode.  Utilizing SFTP requires the installation of the OpenSSH suite of tools.  OpenSSH encrypts all traffic (including passwords) to reduce the likelihood of eavesdropping and connection hacking.

 Implemented in FRS 3.4.0a 3/19/10

Related Release:

Implemented in FRS 3.4.0a 3/19/10

Status: Implemented