What is replacing SFTP?

Answered by Phillip Nicastro

What is replacing SFTP?
As of now, there isn’t a specific technology or protocol that is directly replacing SFTP. However, there are alternative file transfer protocols that are gaining popularity and being used as alternatives to SFTP in certain scenarios. Two such alternatives are FTPS (File Transfer Protocol over SSL/TLS) and HTTPS (Hypertext Transfer Protocol Secure).

FTPS:
FTPS, also known as FTP-SSL, is a secure file transfer protocol that uses SSL (Secure Sockets Layer) or TLS (Transport Layer Security) to create a secure connection between the client and the server. It provides encryption and authentication to ensure the confidentiality and integrity of the data being transmitted.

FTPS can be run in two modes: explicit and implicit. In explicit mode, the client and server negotiate the use of SSL/TLS encryption after the initial connection is established. Implicit mode, on the other hand, requires the SSL/TLS encryption to be established right from the beginning of the connection.

One advantage of FTPS over SFTP is that FTPS is easier to set up and configure, especially if you are already familiar with FTP. It also provides compatibility with existing FTP servers and clients, making it a convenient choice for organizations that have been using traditional FTP and want to enhance the security of their file transfers.

HTTPS:
HTTPS is another alternative to SFTP that is commonly used for secure file transfers. It is an extension of the HTTP protocol, but with an added layer of SSL/TLS encryption for secure communication.

HTTPS is widely used for secure web browsing, but it can also be used for secure file transfers. Many file sharing services and cloud storage providers use HTTPS for file uploads and downloads. It provides a simple and familiar interface for users, as it is accessed through a web browser.

One advantage of HTTPS over SFTP is that it leverages the existing infrastructure and knowledge surrounding web technologies. It eliminates the need for specialized FTP/SFTP clients and allows users to access files directly through a web interface.

Personal Experience:
In my experience, I have seen organizations moving away from SFTP in certain scenarios where the use of FTPS or HTTPS is more suitable. For example, if an organization already has an FTP server in place and wants to enhance the security of their file transfers, implementing FTPS is often the preferred choice. It allows them to leverage their existing infrastructure and knowledge, without the need for major changes or investment in new technologies.

On the other hand, I have also seen cases where organizations have opted for HTTPS for secure file transfers, especially when dealing with file sharing or cloud storage solutions. The familiarity and simplicity of accessing files through a web browser make it a convenient choice for both internal and external users.

Conclusion:
While there isn’t a direct replacement for SFTP, alternatives such as FTPS and HTTPS are gaining popularity and being used for secure file transfers. FTPS provides compatibility with existing FTP infrastructure and is relatively easy to set up, while HTTPS leverages web technologies and provides a familiar interface for users. The choice between these alternatives depends on the specific requirements and preferences of the organization.