Looking for a smart solution for this upload problem

Hi There,

My current project has below requirement. i wonder if anybody sailed thru the path and what their recommendations are...

We have a java web application, for external clients. As part of the application process they need to upload some documents and often these documents are large. As most of our clients are with low bandwidth i assume the http file upload could timeout pretty easily. What would be your suggestion. Also our communication has to happen on secure layer like https or sftp.

I am thinking of providing a ftp upload thru an applet(similar to http://www.jscape.com/sftpapplet/docs/HTML/index.html). But i am skeptical about the security issues. Is providing an ftp option is opening up your server for hacking or there are enough options out there to protect?

I can take proper measures to isolate this ftp server from other servers in the network but what else would you see could be a problem. How do user log in for upload? I can't and don't want to integrate this ftp server with identity management system. How to manage the upload without needing the user to login but not opening up the ftp server is my question.

Any thoughts?

We run on websphere and solaris.

-S

[1246 byte] By [Shilpa_Koula] at [2007-10-2 8:54:03]
# 1
What about SFTP (Secure FTP - encrypted) This company has open source FTP API's but you have to pay for the SFTP version http://www.enterprisedt.com/products/edtftpjssl/overview.html
angrycata at 2007-7-16 22:57:56 > top of Java-index,Enterprise & Remote Computing,Web Tier APIs...
# 2
Sorry, see you already mentioned sftp.The login would seem a problem with ftp too, cant think of a way around it without having a server side app check the login status on the webapp.
angrycata at 2007-7-16 22:57:56 > top of Java-index,Enterprise & Remote Computing,Web Tier APIs...