On Thu, 15 Apr 2021 08:59:26 -0400, Kurt Quackenbush wrote:

>> - Holddata are ftp-Links only. And I want to download holddata without 
>> ordering anything via ShopZ.
>Not true.  You want the IBM HOLDDATA without using FTP?  Use SMP/E
>RECEIVE ORDER and indicate downloadmethod="https".
>
Wrong!  The page at 
https://www.ibm.com/support/pages/ibm-zos-consolidated-service-test-get-cst-service
(and probably many others) links to 
http://service.software.ibm.com/holdata/390holddata.html
and needs to be updated since the linked page contains the FTP links.

"390"?

And the customer might want to download the HOLDDATA to a desktop for
browsing, bypassing SMP/E and RECEIVE ORDER, or the person tasked with
inspecting the HOLDDATA may lack the extraordinary RACF authority that
IBM has required for 12 years in lieu of fixing a security flaw.

On Thu, 15 Apr 2021 12:03:38 +0200, Radoslaw Skorupka wrote:

>While I agree ftp links should be changed to https, I would remind a
>browser is not necessary to use ftp, it's really easy to circumvent it.
>
>In Windows system there is something called cmd.exe or CLI and there is
>a command named ftp.
>
Might a site remove cmd.exe?

>...
>And of course there are plenty of graphical ftp clients (anyone here is
>
Some sites forbid installing such software.

>not familiar with command line interface???).
>Last, but not least Linux systems also have ftp client.

>
Some sites forbid installing such software.
Likewise Cygwin.

>
>Of course corporate firewall can block any ftp traffic, but this is
>different issue.
>
Ay, there's the rub.

Might the minimal effort for IBM be to provide an HTTPS proxy to
access its own FTP servers?  (Are there public proxies?)

-- gil

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to