RE: secure transfers and authentication

["Murda Mcloud" <murdamcloud () bigpond com>]

What are you trying to transfer?

We're looking at sslexplorer -open source-maybe you can integrate the
automation part with it. It is more an ssl vpn solution but can be used
easily for user driven file transfer. 
Very easy to setup, and works nicely so far in testing.

> > -----Original Message-----
> > From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
> > On Behalf Of mgk.mailing () googlemail com
> > Sent: Wednesday, April 02, 2008 6:05 PM
> > To: security-basics () securityfocus com
> > Subject: secure transfers and authentication
> >
> > Hi List
> >
> >
> > I was wondering if anyone had run across anything that would help with my
> > current project.   I am looking to automate transfers over an insecure
> > network where both the client and server are authenticated to each other.
> > My current line of thinking is using ssl signed certificates from our
> > Certificate authority to do the authentication and then https to transfer
> > the data.  Putting aside that http may not be the best transfer mechanism
> > for data can anyone make any suggestions or point out any potential
> > pitfalls that maybe there?  It is vital that the transfer is protected
> > and that the client and server is authenticated.
> >
> > Thanks
> >
> >
> > mgk