The contracts manager at a company needs to make a large legal document available to an overseas customer. However, she has some challenges: The document contains sensitive information; it is too large to send via e-mail, and the manager is expecting an amended document in return. The contracts manager must make the document available in an electronic format to only herself and the customer. First, the contracts manager sets up an FTP account that requires usernames and passwords. She gives these usernames and passwords to the customer and instructs him not to divulge the account information to anyone. She reveals authentication information to the customer only across a secure channel (or in person). Next, the contracts manager sets up a folder on the company FTP site into which she can upload the sensitive document. She ensures that only users with specific permissions can access the folder. The contracts manager now gives the customer permissions to upload and download files to and from this folder.
How could the contracts manager further secure this file? Could she use S/FTP to secure the file? Could she use FTPS? Consider some of the other Internet services discussed in this lesson. Which ones would be inappropriate for transmitting this file? Why?