My need is to let users upload files with ftp, those files have to be
secrets for say two month.
It seems that a common precaution is to use one time passwords but it
seems to me as the opinion of this mailing list states that it isn?t
enough.
Does anyone have a opinion about the risk one expose him self for, if
allowing inbound sessions throng a firewall. I think that there isn?t a
absolutely secure solution even strong cryptography are breakable (if You
have the time (and the plaintext)). How long would it take to take over a
ISP?s router and install software to take over my users sessions.
Regards
Per Josefsson
|
|