Regarding SFTP, I would not like to make to make many assumptions about the customer. Consider the network policies of the institution. At most banks where I provide support, almost every outgoing protocol (FTP/SSH/SFTP) is blocked. Some organisations ONLY allow HTTP/HTTPS, so I would then have to set up a SSH tunnel over HTTP, which adds additional complexity and assumptions into the mix.

In other words, if I do provide an SSH/SFTP mechanism, I would consider it a secondary method.

Niel