Security when uploading files to support

Non-Technical Threads Talk to a SUSE Technical Services Manager
1

Hello,

I have a general question, about security when uploading files: is it secure
to upload files like core dumps or supportconfig over unencrypted
connections? Usually I avoid this question by using Customer Center - but
some files are obviously to big. Unfortunately SFTP is not supported by
ftp.novell.de and supportconfig.

Does Micro Focus consider it secure to upload supportconfigs and core dumps
over plain ftp?

Thanks,
Mirko Guldner

2

On Mon, 06 Mar 2017 10:51:30 +0000, Mirko Guldner wrote:
[color=blue]

Hello,

I have a general question, about security when uploading files: is it
secure to upload files like core dumps or supportconfig over unencrypted
connections? Usually I avoid this question by using Customer Center -
but some files are obviously to big. Unfortunately SFTP is not supported
by ftp.novell.de and supportconfig.

Does Micro Focus consider it secure to upload supportconfigs and core
dumps over plain ftp?

Thanks,
Mirko Guldner[/color]

Hi Mirko,

I see you have not received a response on this so far

I will forward your question to the appropriate team and respond back here
as soon as I hear something on this

Thanks
Hans

3

Hi Hans,

did you get an answer about this?

I have asked different people about this - never got an satisfying answer.

I would like to add to my question:

How secure is Customer Center Portal? As far as I can see files of old SR’s
are available there “forever”? Wouldn’t it be better to delete them it not
needed anymore?

For example here was a security problem mentioned
https://lists.opensuse.org/opensuse-announce/2017-05/msg00000.html

Thanks and regards,
Mirko

[color=blue][color=green][color=darkred]

[/color][/color]
On Mon, 06 Mar 2017 10:51:30 +0000, Mirko Guldner wrote:
[color=green]
Hello,

I have a general question, about security when uploading files: is it
secure to upload files like core dumps or supportconfig over unencrypted[/color][/color]
[color=blue][color=green]
connections? Usually I avoid this question by using Customer Center ‑
but some files are obviously to big. Unfortunately SFTP is not supported[/color][/color]
[color=blue][color=green]
by ftp.novell.de and supportconfig.

Does Micro Focus consider it secure to upload supportconfigs and core
dumps over plain ftp?

Thanks,
Mirko Guldner[/color]

Hi Mirko,

I see you have not received a response on this so far

I will forward your question to the appropriate team and respond back
here
as soon as I hear something on this

Thanks
Hans[/color]