I need to collect XML files from a 3rd party's web server.
These XML files are generated by said 3rd party on a daily basis (e.g.
data_2015-11-26.xml) and should therefore be fetched at least daily as well, by a scheduled task of some sort, probably running on a Windows Server based OS. The files will be imported into an ERP system later on.
The suggestion by the 3rd party was to implement this with Apache's
.htpasswd, i.e. password-protecting a directory with HTTP basic authentication, but over HTTPS.
I hope this question isn't too vague, but would this approach be "reasonably secure"?
What other (better) options are there? Would it make sense to additionally encrypt the XML file itself?
I'd like to keep this fairly simple, while also considering security.