FoxPro Programming
SFTP - SSH - PGP
Gravatar is a globally recognized avatar based on your email address. SFTP - SSH - PGP
  Edward K. Marois
  All
  Feb 3, 2026 @ 05:56am

Dear Rick:

I have the SFTP program that is provided by West Wind up and working with many clients

We want to do SFTP with SSH and PGP

  1. Is the Password PGP ???

  2. How does one go about generating a SSH key

  3. If the your SFTP program does NOT support SSH and PGP, then what do you suggest

Gravatar is a globally recognized avatar based on your email address. re: SFTP - SSH - PGP
  Rick Strahl
  Edward K. Marois
  Feb 4, 2026 @ 10:41am

SFTP always uses SSH - it's the nature off the protocol. Key use encrypted keys - but that's not PGP. PGP relates to message level encryption - ie. the content is encrypted, so that's really separate from the FTP functionality. You'd encrypt the message before sending, then decrypt after receiving.

To be honest I'm not all that familiar how SFTP works, beyond what the library we use exposes.

Here's an AI (Grok) explanation of SSH, use of SSH.NET for SFTP and relation to PGP:

SSH.NET and PGP Encryption

+++ Rick ---

Gravatar is a globally recognized avatar based on your email address. re: SFTP - SSH - PGP
  Edward K. Marois
  Rick Strahl
  Feb 5, 2026 @ 04:37am

Dear Rick:

I have done large amount of research

We are dealing with a Bank

One can do PGP via a Client called WS_FTP, which is a paid service and the software is rather easy to figure out.

Thanks for your help

Gravatar is a globally recognized avatar based on your email address. re: SFTP - SSH - PGP
  Rick Strahl
  Edward K. Marois
  Feb 5, 2026 @ 11:44am

I just checked FileZilla connections - when setting up connections there's no options to specify an encryption layer. For SFTP you can choose username and password or key file as the logon mechanism. So that's the basics of the protocol which matches what my understanding is.

Yes it's possible to combine PGP and SFTP - as apparent WS-FTP allows for - but it's something that happens at the application layer - it's a custom implementation. It's also possible to do this with VFP - using some additional .NET code using the library described for the content. But it's a specialized thing that in this case would have to be coded (ie. encrypt file first then send it, or accept downloaded file then decrypt it).

Frankly in this day and age it seems dumb of any organization to reqiure file uploads via a FTP, when you can do it securely over Http and provide live access to the data and ability to check for potential fraud/hacking as the data is being provided. But... banks - they'll always be 20 years behind the times 😄

+++ Rick ---

© 1996-2026