Maybe that has been answered before (sry didnt found anything relevant in history), file upload is encrypted DIRECT SEND not, is that by design?