View Single Post
  #33  
Old July 17th 06, 11:26 PM posted to rec.aviation.soaring
Jeremy Zawodny
external usenet poster
 
Posts: 85
Default OLC and CAI Binary File Validation (was SSA OLC Region forFlight Claim)

Frank Whiteley wrote:
Although FTP is a reasonable method of file transfer, it isn't likely
the appropriate method of uploading OLC data. FTP has also had a
pattern of security cracks in the past few years, so SCP/SFTP tunneling
via SSH is much preferred. A file transfered via FTP would require an
additional server process, additional server ports, real server load,
and additional scripts and support issues. If would also complicate
the edit function.


Huh?

The security issues in FTP are largely twofold:

(1) it's a cleartext protocol
(2) specific FTP servers have had problems

It's a bit broad to paint ALL of "FTP" as having "security cracks."

The additional server process and associated "real server load" are
trivial in modern terms. I doubt the OLC is run on an old 486.

And it would complicate the edit function only if implemented in a
complicated way. A custom FTP server could take you file, issue you a
"ticket number" or something similar, and you'd use that to tell the
edit form what it needs to know to find your file.

This stuff is not rocket surgery.

Jeremy