Secure Email

Secure Email

am 17.09.2004 12:23:27 von Cameron

Hello, how can I make my email communications as secure as possible
without having to use Encryption keys?

Thanks in advance.

Re: Secure Email

am 17.09.2004 14:40:51 von Felix Tiede

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig5014798556B1CF7367ED81F5
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit

Cameron wrote:
> Hello, how can I make my email communications as secure as possible
> without having to use Encryption keys?
>
> Thanks in advance.
>

You can use X.509-Certificates, but that's simply using encryption without
noticing due to the better integration in most email-clients.
If you don't want to use *any* type of encryption, the most secure email is
email with SPF (Sender Permitted From), which is not yet widely implemented.

Long story short:
There's no way to make email communication more secure than it is without
using encryption.

Greetings,
Felix

--------------enig5014798556B1CF7367ED81F5
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFBSttYDH+mFzdSOa0RAivaAKCEL7zFN6sMw/MHj7XjkvBo+s1kRQCf SWHU
+LbsUMUtfrL0pGRkP2MlQEI=
=ATvT
-----END PGP SIGNATURE-----

--------------enig5014798556B1CF7367ED81F5--

Re: Secure Email

am 17.09.2004 16:46:52 von phn

Cameron wrote:
> Hello, how can I make my email communications as secure as possible
> without having to use Encryption keys?

> Thanks in advance.

You cannot. Get used to exchanging keys, there is several ways
to deal with key distribution.


--
Peter Håkanson
IPSec Sverige ( At Gothenburg Riverside )
Sorry about my e-mail address, but i'm trying to keep spam out,
remove "icke-reklam" if you feel for mailing me. Thanx.

Re: Secure Email

am 17.09.2004 18:53:02 von lahippel

Felix Tiede wrote:
<...>
> There's no way to make email communication more secure than it is
> without using encryption.

You probably didn't mean that in the sense that I read it... ;->

-- Lassi

Re: Secure Email

am 17.09.2004 21:05:59 von Felix Tiede

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig19A97B6DA648549EA50CE711
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8bit

Lassi Hippeläinen wrote:
> Felix Tiede wrote:
> <...>
>
>> There's no way to make email communication more secure than it is
>> without using encryption.
>
>
> You probably didn't mean that in the sense that I read it... ;->
>
> -- Lassi

Depends on the way you read it.
If you mean, that email is less secure than sending a postcard, yes, I
consider this also as a state of security: A state of very very weak
security... ;-)

Felix

--------------enig19A97B6DA648549EA50CE711
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFBSzWbDH+mFzdSOa0RAtSNAJ997HnLX7nERbX2KJIuAuqOt3B5yQCe Kfp8
r3gcmZyt+dv8OEsnr/zMlD4=
=PmrD
-----END PGP SIGNATURE-----

--------------enig19A97B6DA648549EA50CE711--

Re: Secure Email

am 18.09.2004 17:48:16 von Don Kelloway

"Cameron" wrote in message
news:cieduv$o8e@odak26.prod.google.com...
> Hello, how can I make my email communications as secure as possible
> without having to use Encryption keys?
>
> Thanks in advance.
>

I'm a bit perplexed by the comment of not wanting to use encryption keys,
but if what you are inquiring about is not wanting to be concerned with
maintaining/exchanging encryption keys with other people and vice-versa,
maybe ZixMail could suit your needs.

ZixMail is a desktop-level solution that provides point-to-point secure
email delivery. It's a simple, easy-to-use e-messaging solution that enables
you to encrypt, decrypt, and send private and secure, digitally signed email
and attachments to anyone even if the recipient is not a ZixMail subscriber.

http://www.zixcorp.com/compro/zixmail.php


--
Best regards, from Don Kelloway of Commodon Communications
Visit http://www.commodon.com to learn about the "Threats to Your Security
on the Internet".

Re: Secure Email

am 20.09.2004 08:42:32 von lahippel

Felix Tiede wrote:
>
> Lassi Hippeläinen wrote:
> > Felix Tiede wrote:
> > <...>
> >
> >> There's no way to make email communication more secure than it is
> >> without using encryption.
> >
> >
> > You probably didn't mean that in the sense that I read it... ;->
> >
> > -- Lassi
>
> Depends on the way you read it.
> If you mean, that email is less secure than sending a postcard, yes, I
> consider this also as a state of security: A state of very very weak
> security... ;-)

I first read it as "email without encryption is the most secure way". It
depends on how you group the words...

-- Lassi

Re: Secure Email

am 20.09.2004 15:56:02 von Cameron

Thanks, the service looks interesting. Yes, what I want to avoid is
having to bother new business contacts etc. into understanding and
configuring encryption keys. So I'm looking for as much email security
as possible without the hassle of encryption keys.

Thanks, Cameron

Re: Secure Email

am 20.09.2004 16:55:11 von phn

Cameron wrote:
> Thanks, the service looks interesting. Yes, what I want to avoid is
> having to bother new business contacts etc. into understanding and
> configuring encryption keys. So I'm looking for as much email security
> as possible without the hassle of encryption keys.

Then use fax.

There is no such thing as free security. It all boils down to
knowledge. For instance the key or certificated you receive
from a "new partner" - is it really true or is someone faking.

Other issues comies in, do you belive company xyz to be honest and
always trustable( i'm thinking of CA's here) or do you only
belive things you can verufy by yourself ?

And finally, how importent is your information (that is exchanged via mail),
if it's less valuable then the cost of running good encryption (Tm)
then you should probably do without it.



> Thanks, Cameron


--
Peter Håkanson
IPSec Sverige ( At Gothenburg Riverside )
Sorry about my e-mail address, but i'm trying to keep spam out,
remove "icke-reklam" if you feel for mailing me. Thanx.

Re: Secure Email

am 21.09.2004 10:55:35 von john.elsbury

On 20 Sep 2004 06:56:02 -0700, "Cameron"
wrote:

>Thanks, the service looks interesting. Yes, what I want to avoid is
>having to bother new business contacts etc. into understanding and
>configuring encryption keys. So I'm looking for as much email security
>as possible without the hassle of encryption keys.
>
>Thanks, Cameron
>
There are (or at least were) packages which will encrypt an e-mail
message and wrap it up with a decrypting program, all you have to do
is communicate the password some other way to the addressee. The bad
news is that many people are unwilling (or in some cases, if they have
applied security updates, unable) to receive and run executable
attachments. Or sit behind filters which block them when they arrive.

Another option might be something like what Tumbleweed used to call
"secure statement delivery" but that might be too large (and
expensive) for what you need. In summary, the software removes an
attachment according to whatever policies you define and stashes it on
a web-facing server, then replaces it with a bit of script and a note
saying "run me to retrieve the e-mail item sent to you by X" (or
whatever, it's all configurable). The addressee runs the script which
sets up a secure session to pull the e-mail message via their browser.

Yet another option might be setting up a mail server of your own - for
example, if you use Exchange, Exchange Web Extensions - and giving
your prospect/customer an e-mail account.
Please remove "nospam" from mailto address
when replying

Re: Secure Email

am 22.09.2004 16:15:32 von mruttan

"Cameron" wrote in message news:...
> Hello, how can I make my email communications as secure as possible
> without having to use Encryption keys?
>
> Thanks in advance.

Use "A-LOCK" for email - type the message, same as usual, then click
the A-LOCK icon to encrypt

Info at http://www.pc-encrypt.com/_site/alock/features.mhtml
Free download at http://www.pc-encrypt.com/_site/alock/download.mhtml

Re: Secure Email

am 10.10.2004 13:34:16 von 0versight

Cameron wrote:
> Hello, how can I make my email communications as secure as possible
> without having to use Encryption keys?
>
> Thanks in advance.
>
By keeping your computer safe really, up to date virus definitions,
malware cleaned every few days with spybot, ad-aware,spyware blaster,
etc. Dont use Internet Explorer, use another browser like mozilla or
firefox.

-0versight