Re: Encryption

jeffuk123 <jeffuk123@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

Is it really worth encrypting emails?

What's the cost of exposing the information?

Are they concerned with confidentiality or privacy (encrypted email
doesn't guarantee privacy)?

A client has Exchange 2003 installed, and has been reading up some articles
on encrypting email data.

I think this has made them feel over sensitive and they now are wishing to
use a third party web-based program to encrypt data.

Encrypting (assuming you refer to S/MIME and the use of X.509v3 certs)
an individual message requires that both parties have the same kind of
certs (X.509v3, PGP, etc.). That can make getting started a bit
awkward for most people.

Using gateway encryption is a bit easier but it only protects the
message between the two endpoints, kinda like SSL or TLS.

Using IBE (which is what I expect is being proposed) is a lot easier
becasue it doesn't require the exchange of keys before sending a
message. It does usually need another "key server". Voltage and PostX
are both examples of IBE.

Any suggestion.

With so little information about the requirements? Nope.

--
Rich Matheisen
MCSE+I, Exchange MVP
MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm
Don't send mail to this address mailto:h.pott@xxxxxxxxxxxxx
Or to these, either: mailto:h.pott@xxxxxxxxxxxxxxx mailto:melvin.mcphucknuckle@xxxxxxxxxxxxx mailto:melvin.mcphucknuckle@xxxxxxxxxxxxxxx
.