Is it required to encrypt data while transferring over SFTP












-1














We are sending some date from one system to another system (outside network). The data will be transferred over SFTP. Some the data is sensitive.



I was told that since we are sending it over SFTP, we don't need to encrypt the data. As per my understanding even if we are sending data over SFTP, we should encrypt it.



I want to know if it's true that we don't need to encrypt data if we are sending over SFTP?










share|improve this question






















  • Do you trust the other system?
    – SLaks
    Nov 13 '18 at 3:04










  • Yes. basically, we will be writing that data to csv files and then copying those csv files to a shared location. Another system (outside the network) wll pick those csv files.
    – PKJ
    Nov 13 '18 at 3:09
















-1














We are sending some date from one system to another system (outside network). The data will be transferred over SFTP. Some the data is sensitive.



I was told that since we are sending it over SFTP, we don't need to encrypt the data. As per my understanding even if we are sending data over SFTP, we should encrypt it.



I want to know if it's true that we don't need to encrypt data if we are sending over SFTP?










share|improve this question






















  • Do you trust the other system?
    – SLaks
    Nov 13 '18 at 3:04










  • Yes. basically, we will be writing that data to csv files and then copying those csv files to a shared location. Another system (outside the network) wll pick those csv files.
    – PKJ
    Nov 13 '18 at 3:09














-1












-1








-1


1





We are sending some date from one system to another system (outside network). The data will be transferred over SFTP. Some the data is sensitive.



I was told that since we are sending it over SFTP, we don't need to encrypt the data. As per my understanding even if we are sending data over SFTP, we should encrypt it.



I want to know if it's true that we don't need to encrypt data if we are sending over SFTP?










share|improve this question













We are sending some date from one system to another system (outside network). The data will be transferred over SFTP. Some the data is sensitive.



I was told that since we are sending it over SFTP, we don't need to encrypt the data. As per my understanding even if we are sending data over SFTP, we should encrypt it.



I want to know if it's true that we don't need to encrypt data if we are sending over SFTP?







encryption sftp public-key-encryption






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked Nov 13 '18 at 3:04









PKJPKJ

8319




8319












  • Do you trust the other system?
    – SLaks
    Nov 13 '18 at 3:04










  • Yes. basically, we will be writing that data to csv files and then copying those csv files to a shared location. Another system (outside the network) wll pick those csv files.
    – PKJ
    Nov 13 '18 at 3:09


















  • Do you trust the other system?
    – SLaks
    Nov 13 '18 at 3:04










  • Yes. basically, we will be writing that data to csv files and then copying those csv files to a shared location. Another system (outside the network) wll pick those csv files.
    – PKJ
    Nov 13 '18 at 3:09
















Do you trust the other system?
– SLaks
Nov 13 '18 at 3:04




Do you trust the other system?
– SLaks
Nov 13 '18 at 3:04












Yes. basically, we will be writing that data to csv files and then copying those csv files to a shared location. Another system (outside the network) wll pick those csv files.
– PKJ
Nov 13 '18 at 3:09




Yes. basically, we will be writing that data to csv files and then copying those csv files to a shared location. Another system (outside the network) wll pick those csv files.
– PKJ
Nov 13 '18 at 3:09












1 Answer
1






active

oldest

votes


















2














SFTP uses SSH as the underlying protocol. SSH handles encryption for you. Provided the SSH connection is secured well (e.g. using a private key) and you trust the system you are communicating with, you don't need to implement any further encryption.






share|improve this answer





















  • We will be placing the data (in the form of CSV file) to a shared Box (A secure file sharing system) location. The other system will pick the files from this location.
    – PKJ
    Nov 13 '18 at 3:12










  • Then yes, SFTP provides all the security you need.
    – Luke Joshua Park
    Nov 13 '18 at 3:18











Your Answer






StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});














draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53273178%2fis-it-required-to-encrypt-data-while-transferring-over-sftp%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown

























1 Answer
1






active

oldest

votes








1 Answer
1






active

oldest

votes









active

oldest

votes






active

oldest

votes









2














SFTP uses SSH as the underlying protocol. SSH handles encryption for you. Provided the SSH connection is secured well (e.g. using a private key) and you trust the system you are communicating with, you don't need to implement any further encryption.






share|improve this answer





















  • We will be placing the data (in the form of CSV file) to a shared Box (A secure file sharing system) location. The other system will pick the files from this location.
    – PKJ
    Nov 13 '18 at 3:12










  • Then yes, SFTP provides all the security you need.
    – Luke Joshua Park
    Nov 13 '18 at 3:18
















2














SFTP uses SSH as the underlying protocol. SSH handles encryption for you. Provided the SSH connection is secured well (e.g. using a private key) and you trust the system you are communicating with, you don't need to implement any further encryption.






share|improve this answer





















  • We will be placing the data (in the form of CSV file) to a shared Box (A secure file sharing system) location. The other system will pick the files from this location.
    – PKJ
    Nov 13 '18 at 3:12










  • Then yes, SFTP provides all the security you need.
    – Luke Joshua Park
    Nov 13 '18 at 3:18














2












2








2






SFTP uses SSH as the underlying protocol. SSH handles encryption for you. Provided the SSH connection is secured well (e.g. using a private key) and you trust the system you are communicating with, you don't need to implement any further encryption.






share|improve this answer












SFTP uses SSH as the underlying protocol. SSH handles encryption for you. Provided the SSH connection is secured well (e.g. using a private key) and you trust the system you are communicating with, you don't need to implement any further encryption.







share|improve this answer












share|improve this answer



share|improve this answer










answered Nov 13 '18 at 3:08









Luke Joshua ParkLuke Joshua Park

4,99751631




4,99751631












  • We will be placing the data (in the form of CSV file) to a shared Box (A secure file sharing system) location. The other system will pick the files from this location.
    – PKJ
    Nov 13 '18 at 3:12










  • Then yes, SFTP provides all the security you need.
    – Luke Joshua Park
    Nov 13 '18 at 3:18


















  • We will be placing the data (in the form of CSV file) to a shared Box (A secure file sharing system) location. The other system will pick the files from this location.
    – PKJ
    Nov 13 '18 at 3:12










  • Then yes, SFTP provides all the security you need.
    – Luke Joshua Park
    Nov 13 '18 at 3:18
















We will be placing the data (in the form of CSV file) to a shared Box (A secure file sharing system) location. The other system will pick the files from this location.
– PKJ
Nov 13 '18 at 3:12




We will be placing the data (in the form of CSV file) to a shared Box (A secure file sharing system) location. The other system will pick the files from this location.
– PKJ
Nov 13 '18 at 3:12












Then yes, SFTP provides all the security you need.
– Luke Joshua Park
Nov 13 '18 at 3:18




Then yes, SFTP provides all the security you need.
– Luke Joshua Park
Nov 13 '18 at 3:18


















draft saved

draft discarded




















































Thanks for contributing an answer to Stack Overflow!


  • Please be sure to answer the question. Provide details and share your research!

But avoid



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.





Some of your past answers have not been well-received, and you're in danger of being blocked from answering.


Please pay close attention to the following guidance:


  • Please be sure to answer the question. Provide details and share your research!

But avoid



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53273178%2fis-it-required-to-encrypt-data-while-transferring-over-sftp%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







這個網誌中的熱門文章

Xamarin.form Move up view when keyboard appear

Post-Redirect-Get with Spring WebFlux and Thymeleaf

Anylogic : not able to use stopDelay()