OSG-SEC-2018-08-07 data-channel encryption not guaranteed

Dear OSG Security Contacts,

This advisory is intended for VO contacts.

If you need encrypted data transfer, encrypt the data before transmission instead of using GridFTP's built-in data encryption. This is because data-channel encryption is not necessarily guaranteed, even when requested.

MORE INFORMATION:

https://wiki.egi.eu/wiki/SVG:Advisory-SVG-2018-14117

Please contact the OSG security team at [email protected] if you have any questions or concerns.

OSG Security Team