RE: Data Transmission with HTTPAPI

[Richard Wilson <Richard.Wilson@xxxxxxxxxxxxxxx>]

I was asked the same question, and the answer was to define a peer review process for the code, signed off, by >1 developer, which states, in effect, that the code does as it should and doesn't contain anything it shouldn't. 

All code must be compiled on site, from reviewed code.


Our security people were involved and interested in the process, and we now use it for any 'open source', which may be considered for adoption. 






> -----Original Message-----
> From: Huskey, Brad [mailto:Brad.Huskey@xxxxxxxxxxxxxxxx]
> Sent: 27 January 2010 21:40
> To: ftpapi@xxxxxxxxxxxxxxxxxxxxxx
> Subject: Data Transmission with HTTPAPI
> 
> Scott,
> 
> How can I be sure the data being transmitted with HTTPAPI is being shared
> with only the intended parties?  I am not thinking so much about the
> encryption aspect (I expect we will use SSL for sensitive data), but more
> about the software itself.  I am not suggesting the software has malicious
> code in it, but our data security team will be very interested in
> demonstrating the software's integrity.
> 
> Thanks,
> 
> 
> [cid:image001.png@01CA9F6F.5C79C1B0]


This document may contain confidential information intended for the addressee only. Any views or opinions presented do not necessarily represent those of Newcastle Building Society or its subsidiary companies, hereinafter referred to as NBS Group.

If you are not the intended recipient, any disclosure, copying, or reliance upon this E-mail is prohibited. If you have received this document in error, please notify the sender so that NBS Group may arrange for its proper delivery. All e-mails are scanned for viruses and other unacceptable content, which may result in non-delivery of a small proportion of e-mails. Anyone sending urgent/important e-mails should therefore confirm delivery.

NBS Group does not enter into contracts by means of Internet or e-mail and staff are not authorised to enter into contracts in this way. 
 
Newcastle Building Society introduces to Newcastle Financial Services Limited (NFSL).  NFSL is an appointed representative of Openwork Limited, which is authorised and regulated by the FSA. Newcastle Building Society is authorised and regulated by the Financial Services Authority (www.fsa.gov.uk/register/) and is entered in the Financial Services Authority Register under Registration No. 156058.

Web site: www.newcastle.co.uk
-----------------------------------------------------------------------
This is the FTPAPI mailing list.  To unsubscribe, please go to:
http://www.scottklement.com/mailman/listinfo/ftpapi
-----------------------------------------------------------------------