Sorry if this is off topic, but I have just tried sslforfree. You let it upload via FTP (or FTPS/SFTP) but the query to check if the file is there is done via HTTP. Why not just validate that the domain is mine if the FTP upload is successful? Or maybe even just redownload the file to see if contents match. I don't get it.