QuestionQ37

VerifiedDesigning integration solutions to meet security requirements

A company is developing a Mule application to consume batch data from a partner's FTPS server, ftps.partner.com. The data files are compressed (but not encrypted) and have been digitally signed by the partner using Pretty Good Privacy (PGP).

What inputs does the application need to securely log in to the FTPS server and consume these files?

Explanation

An FTPS client uses its login username and password for server access and a TLS truststore containing the FTPS server’s public certificate to validate the server. A PGP signature is validated with the signer’s public key; because the files are not PGP-encrypted, the recipient does not need a PGP private key.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!