Skip to content

Trust Models

Different Xferity protocols rely on different trust models. This matters because secure file exchange is not one generic problem.

SFTP trust is based on SSH host verification. The key question is whether the client can confirm it is talking to the intended SSH server.

FTPS trust is based on TLS certificates. The key questions are whether the certificate is valid, trusted, and appropriate for the endpoint.

S3-compatible integrations rely on endpoint correctness, credential scope, and bucket or object policy rather than SSH-style or AS2-style trust anchors.

AS2 trust is certificate-role based and message-oriented. Different certificate roles may be used for signing, encryption, verification, and MDN-related processing.

Treating all protocols as if they shared a single trust checkbox usually creates weak documentation and weak review outcomes. Xferity keeps the trust boundaries explicit so engineering and security teams can review them accurately.