Secure file transfer to a hosted server ?
Short summary - I have been landed with a job to provide secure (as in encrypted) file transfer to a hosted linux server.
Solution - use ssh/scp/sftp which encrypts the traffic between host and server.
Problem - it involves giving the user an SSH login and it also seems to be pretty hard to stop them from navigating back up the directory tree and seeing other users files. Looking at removing eXecute permissions from the parent directory as a possible solution.
I am sure that it is possible to secure the whole process and ring-fence them into their own directory, but I can't track down a howto.
Does anyone have any pointers please ?
Alternatively does anyone know any other file transfer mechanisms that encrpyt the traffic ? Am investigting VPNs but the user is looking for a low-impact solution.
Thanks,
z
Short summary - I have been landed with a job to provide secure (as in encrypted) file transfer to a hosted linux server.
Solution - use ssh/scp/sftp which encrypts the traffic between host and server.
Problem - it involves giving the user an SSH login and it also seems to be pretty hard to stop them from navigating back up the directory tree and seeing other users files. Looking at removing eXecute permissions from the parent directory as a possible solution.
I am sure that it is possible to secure the whole process and ring-fence them into their own directory, but I can't track down a howto.
Does anyone have any pointers please ?
Alternatively does anyone know any other file transfer mechanisms that encrpyt the traffic ? Am investigting VPNs but the user is looking for a low-impact solution.
Thanks,
z