Sign Up

New Release Communique

Updated on Getting Started
On this page
  1. 2026
  2. 2025
  3. 2024
  4. 2023
  5. 2022
  6. 2021
  7. 2019
  8. 2018
  9. 2017

Starting August 2017, new release information will be summarized on this page. Newest releases are listed first.

2026#

  1. SSL certificate renewal for hostedftp.com

    31 sec FTP downtime: 10:00:52 – 10:01:23 AM EDT

  2. Hosted~FTP~ software version 3.65.0

    Security improvements.

    New feature added: Require SSH public-key authentication for all users (sftp)

    1 min 5 sec FTP downtime: 10:02:47 – 10:03:52 AM ET

  3. Hosted~FTP~ software version 3.63.0

    Security improvements, library upgrades and a database migration.

    13 min FTP downtime: 10:43:00 – 10:56:00 AM ET

2025#

  1. SSL certificate renewal

    22 sec FTP downtime: 10:00:50 – 10:01:12 AM ET

  2. Database engine update

    Infrastructure update to a newer minor engine version for the database.

    30 sec FTP downtime: 10:00:40 – 10:01:10 AM ET

  3. Captcha fix

    Bug fix for captcha image rendering issues.

    2 min FTP downtime: 10:31 – 10:33 AM ET

  4. Infrastructure updates

    Infrastructure updates, bug fixes and general improvements.

    5 min FTP downtime: 10:01 – 10:06 AM ET

  5. Bug fixes

    Bug fixes and general improvements.

    27 sec FTP downtime: 9:32:46 – 9:33:13 PM ET

  6. Hosted~FTP~ software version 3.58.0

    • Adds support for new SSH/SFTP key exchange, host key, cipher and MAC algorithms for both incoming and outgoing (sync-to-sftp) connections.
    • All existing security configurations will continue to be supported; new options are now available.
    • MySQL databases upgraded to a newer minor version.
    Algorithm changes

    Cipher

    Old list: aes128-ctr, aes256-ctr, aes128-cbc, aes192-cbc, aes256-cbc

    New list: aes128-ctr, aes256-ctr, aes128-gcm@openssh.com, aes256-gcm@openssh.com, aes128-cbc, aes192-cbc, aes256-cbc, chacha20-poly1305@openssh.com

    Key exchange

    Old list: diffie-hellman-group-exchange-sha256, ecdh-sha2-nistp256, ecdh-sha2-nistp384, ecdh-sha2-nistp521, diffie-hellman-group14-sha1, diffie-hellman-group1-sha1

    New list: sntrup761x25519-sha512, sntrup761x25519-sha512@openssh.com, curve25519-sha256, curve25519-sha256@libssh.org, curve448-sha512, ecdh-sha2-nistp521, ecdh-sha2-nistp384, ecdh-sha2-nistp256, diffie-hellman-group-exchange-sha256, diffie-hellman-group18-sha512, diffie-hellman-group17-sha512, diffie-hellman-group16-sha512, diffie-hellman-group15-sha512, diffie-hellman-group14-sha1, diffie-hellman-group1-sha1

    MAC

    Old list: hmac-sha2-256, hmac-sha2-512, hmac-sha1

    New list: hmac-sha2-256-etm@openssh.com, hmac-sha2-512-etm@openssh.com, hmac-sha2-256, hmac-sha2-512, hmac-sha1

    ~30 sec FTP downtime: shortly after 10:00 AM EST

  7. Seoul speed relay retired

    The speed relay in Seoul, Korea (hostname kr1.hostedftp.com, IP address 52.79.44.137) is deprecated. Traffic that uses the CNAME kr1.hostedftp.com is automatically forwarded to jp1.hostedftp.com.

    Customer impact: connections that use the kr1.hostedftp.com IP address need to change to IP address 54.248.83.147.

  8. Security patches and SSO fix

    Fixed an issue with Single Sign-On by SAML where a user could intermittently be redirected to a blank screen after a successful login.

    Also removed Group from the Services and Pricing page at https://hostedftp.com/services. No customer impact: the Group bundle is no longer available for subscription, so this is a documentation change only.

    25 sec FTP downtime: 10:02:25 – 10:02:50 AM EST

2024#

  1. Proxy login fix

    Fixed an issue where admins logging into their user accounts with the proxy login did not get the correct syntax, [AdminUsername]/[Username], auto-filled at the login screen.

    25 sec FTP downtime: 10:02:30 – 10:02:55 AM EST

  2. Sync rules fix

    Fixed an issue where sync processes with rules that contained JavaScript were failing.

    25 sec FTP servers restarted: 1:02:45 – 1:03:10 PM EDT

  3. Internal configuration updates and two bug fixes

    • Fixed an issue exporting reports where a field ends in “%” but isn’t actually a numeric percentage.
    • Fixed an issue on SFTP where server support for ext-info-s was incorrectly advertised, causing some client connections to fail.

    ~30 sec FTP downtime: between 10:00 – 10:05 AM EDT

  4. Java and Tomcat upgrades

    Infrastructure upgrades (Java and Tomcat) and internal code reorganization.

    • Added a Users report on the Reports tab.
    • Fixed downloading a folder with file names that contain non-English characters.

    2 min 9 sec FTP downtime: 10:02:54 – 10:03:18 (24 sec) and 10:26:44 – 10:28:29 (1 min 45 sec)

  5. Internal framework changes

    There is a syntax change when importing users and shared folders that contain defined import fields. See Importing users in bulk: syntax and definitions for details.

    ~3 min FTP downtime: 10:00:30 – 10:03:00 AM EDT

  6. Group to Enterprise billing change

    Aligns subscription changes for the Group Sunset to Enterprise initiative with the credit card processing system. Group customers are automatically billed at the Enterprise rate for recurring charges as of September 1, 2024. For details, contact support@hostedftp.com.

    No impact to the FTP site.

  7. Transfer and login improvements

    Technical changes to streamline the process flow for transfers and logins.

    ~2 min FTP downtime: between 10:00 – 10:05 AM EDT

  8. Database performance

    Improvements to database processing performance.

    22 sec FTP downtime: 10:02:20 – 10:02:42 AM EDT

  9. Code optimization

    Code optimization with no impact to end users. We also updated the dates on the Terms and Privacy Policy pages on hostedftp.com.

    ~1 min FTP downtime: between 10:00 – 10:05 AM EDT

  10. Reports server fix

    Fixes an issue on the reports server. This is a behind-the-scenes fix only; customers will not notice any changes.

    ~30 sec FTP downtime: between 10:00 – 10:01 AM EDT

2023#

  1. Runtime profiles and database upgrade

    • New ftp-service runtime profiles to restart FTP (about 20 seconds of downtime).
    • Several changes to the RDS infrastructure due to AWS RDS version expiry and SOC 2 encryption requirements.
    • The ftp-service database is upgraded to a new MySQL version (less than 1 minute of downtime).

    < 1 min FTP downtime: about 20 seconds for the FTP restart

2022#

  1. SSH and SFTP algorithm updates

    • Added support for ECDSA host key and user authentication.
    • Added support for SHA2-256 and SHA2-512 signature algorithms for use with RSA keys.
    • Enabled the FTP Active IP check.
    • Forced TLSv1.2 for sending SMTP mail.
    • Disabled SFTP MAC algorithm hmac-sha1-96.
    • Disabled SFTP key exchange algorithm diffie-hellman-group-exchange-sha1.

    20–30 sec FTP downtime: at 10:03 AM

  2. Pricing change

    Pricing for all Hosted~FTP~ services changed as of Saturday, Aug 9, 2022 at 10:00 AM EDT. See Services and Pricing.

  3. Account notification message

    A notification message is shown at the top of the Account/Home page starting July 9, 2022. It is only visible to account administrators when they log in, and stops displaying automatically on September 10, 2022 (2 months after the first notification).

  4. Azure AD sign-in and sync between users

    • Added a site-level setting that prevents users other than admins from editing JavaScript fields via servlet/cmd.
    • Allowed sync from a Hosted~FTP~ source to a Hosted~FTP~ target (creates a copy of the uploaded file under a different user and/or folder within the same account).
    • Added Azure Active Directory as an SSO login option.
    • Added a connection timeout for Active Directory logins.

  5. SSL certificate change

    Our SSL certificate expiration date has changed. Please trust/accept the certificate if prompted.

  6. New development and build environment

    Migration to a more advanced development and build environment, updating FTP and the Ftp-Service Console. There are no functional changes for customers; this is an internal change to modernize our development processes.

    2–3 min FTP downtime: expected

2021#

  1. Group bundle login limit

    The monthly login limit for the Group bundle changed to 5,000 logins per month. Automation support is not included at the Group level.

  2. SFTP connection limit per IP address

    A rule added to the Linux iptables firewall on all FTP front-end servers limits simultaneous connections on port 22 to 256 per IP address. This matches the existing limits on ports 20–21, 80, 443 and the FTP passive port range 1200–2000. Applied at 9 PM EST.

    No FTP server downtime.

2019#

  1. Drag & drop upgrade

    Significant upgrade to the drag & drop feature that removes the need to install Java. The default limit is 10,000 files per drag & drop in the web browser. The maximum file size for web browser uploads, previously 2 GB, now matches your subscribed bundle.

  2. DNS Flag Day

    Hosted~FTP~ uses AWS Route 53 for DNS, which is fully compliant with EDNS0 as ratified by the IETF. See the AWS forum thread: https://forums.aws.amazon.com/message.jspa?messageID=851817

    AWS comment from Jan 23, 2019

    On February 1, 2019, a number of companies that provide DNS software and DNS service are removing some workarounds for long-known deficiencies in several DNS products. The website for this campaign, https://dnsflagday.net/, includes a test that lets you see whether your domain is affected by these changes. If you run the test on a domain that uses Route 53 as the DNS service, you’ll see the message “Minor problems detected!” The accompanying technical report shows that Route 53 doesn’t support the EDNS extension EDNS1. While this is true, it’s missing some important context.

    Route 53 fully supports EDNS0, the only version of EDNS that has been ratified by the IETF. The test is reporting that Route 53 responds in an unexpected way when presented with another EDNS version (EDNS1 in the example, but it could just as easily be EDNS42, neither of which exist today). We’re working on a change now, which will ensure that Route 53 returns the appropriate response to DNS queries that include an unrecognized EDNS extension.

2018#

  1. Security features for Enterprise bundles

    Added to the Enterprise T2/T5/T10 account bundles:

    • IP whitelist by account and by individual user.
    • Password complexity policy per industry standard.
    • FTP server passive port bug fix (pre-emptive fix).

    ~10 min FTP downtime: at 10 AM (per maintenance release policy)

  2. Availability and reliability fixes

    • Deployed the SFTP timeout fix from the Australia speed relay to all servers (pre-emptive fix).
    • Updated AWS SES settings to provide a working backup when the SendGrid email notification service goes down (pre-emptive fix).

    ~10 min FTP downtime: at 10 AM (per maintenance release policy)

  3. RSA host key added

    Our servers now include an RSA host key as well as the previous DSA host key. Systems usually negotiate with our service at connection time and select their preferred host key type. This may affect automated systems that previously connected using DSA and already “trusted” the DSA host key. If your system prefers RSA, it can connect and trust the new key.

    RSA host key: bc9d86202d681a35bb9d5c41f4eb694c
    DSA host key: ce2f1c9f870af0b33183995780aee9b6

2017#

  1. RSA 2048-bit signature key

    Implemented an RSA 2048-bit signature key for the SSH protocol on us4.hostedftp.com, which now provides both RSA and DSA signature keys.

Help topics