FIPS Compliance

Question

I have read in other threads that older versions of the client aren't FIPS compliant?
Is this true? We are using edtFTPnetPRO version 5.0.2.0 which has worked great for us.

Also, is there a newer version that is FIPS compliant ?

Thanks.

Answer 1

No, we don't support FIPS compliance. It is too expensive a process for niche products, and forces the use of older algorithms that aren't necessarily as secure as newer ones.

The easiest way for products to claim FIPS compliance is to use the OpenSSL library, and as we know from Heartbleed, that doesn't guarantee security.