Unfortunately the data is sensitive and while it is encrypted I am not feeling comfortable with ftp.
The server itself is hardened with only ports 21 and 53 open. I thought about using sftp but the idea of opening traffic on port 22 seemed to be asking for more trouble.
The server does use DNS to check the source of the uploads/downloads; they do both so permissions need to allow for read/write.

We are changing their passwords frequently which does not make for a happy client.

I guess what has me up in arms is that TLS is not that new and clearly the way to go with a protocol such as ftp that you would think large companies would adopt it quickly.

__________________
"The future is here. It's just not evenly distributed.