PDA

View Full Version : Security when uploading files to support



Mirko Guldner
06-Mar-2017, 11:51
Hello,

I have a general question, about security when uploading files: is it secure
to upload files like core dumps or supportconfig over unencrypted
connections? Usually I avoid this question by using Customer Center - but
some files are obviously to big. Unfortunately SFTP is not supported by
ftp.novell.de and supportconfig.

Does Micro Focus consider it secure to upload supportconfigs and core dumps
over plain ftp?

Thanks,
Mirko Guldner

Hans van den Heuvel
16-Mar-2017, 14:44
On Mon, 06 Mar 2017 10:51:30 +0000, Mirko Guldner wrote:

> Hello,
>
> I have a general question, about security when uploading files: is it
> secure to upload files like core dumps or supportconfig over unencrypted
> connections? Usually I avoid this question by using Customer Center -
> but some files are obviously to big. Unfortunately SFTP is not supported
> by ftp.novell.de and supportconfig.
>
> Does Micro Focus consider it secure to upload supportconfigs and core
> dumps over plain ftp?
>
> Thanks,
> Mirko Guldner

Hi Mirko,

I see you have not received a response on this so far

I will forward your question to the appropriate team and respond back here
as soon as I hear something on this


Thanks
Hans

mguldner
06-Jul-2017, 11:09
Hi Hans,

did you get an answer about this?

I have asked different people about this - never got an satisfying answer.

I would like to add to my question:

How secure is Customer Center Portal? As far as I can see files of old SR's
are available there "forever"? Wouldn't it be better to delete them it not
needed anymore?

For example here was a security problem mentioned
https://lists.opensuse.org/opensuse-announce/2017-05/msg00000.html

Thanks and regards,
Mirko


>>>
> On Mon, 06 Mar 2017 10:51:30 +0000, Mirko Guldner wrote:
>
>> Hello,
>>
>> I have a general question, about security when uploading files: is it
>> secure to upload files like core dumps or supportconfig over unencrypted

>> connections? Usually I avoid this question by using Customer Center ‑
>> but some files are obviously to big. Unfortunately SFTP is not supported

>> by ftp.novell.de and supportconfig.
>>
>> Does Micro Focus consider it secure to upload supportconfigs and core
>> dumps over plain ftp?
>>
>> Thanks,
>> Mirko Guldner
>
> Hi Mirko,
>
> I see you have not received a response on this so far
>
> I will forward your question to the appropriate team and respond back
> here
> as soon as I hear something on this
>
>
> Thanks
> Hans