to ssl or not?

[gilvago]

Apologies for what is probably a naive question but... if I'm transmitting an encrypted file should I still use SSL? I'm assuming the transfer will be quicker if I don't use SSL - but does that then mean my s3 id and access key will be sent in plain text?

[ferrix]

but does that then mean my s3 id and access key will be sent in plain text?

No S3 is designed to always protect your secret key.  SSL is only for securing the contents of the nodes in-flight from eavesdropping.

[gilvago]

Thanks ferrix

[lejarrag]

SSL will also authenticate the AWS server, i.e., check that the server you are connected to effectively is the Amazon server.  On the other hand, even banks sites do not routinely authenticate themselves, even though they use SSL to encrypt transactions.  This, at least, is what I understand.