Re:Betr.: RE: encryption

From: Philip Wagenaar (p.wagenaar_at_accon.nl)
Date: 01/28/05

  • Next message: Paris E. Stone: "RE: RPC over HTTP security"
    Date: Fri, 28 Jan 2005 15:18:47 +0100
    To: <security-basics@securityfocus.com>
    
    

    If a hacker modifies code in the webapplication it still would go unnoticed.

    So would there be away to sign the code/html from a webappplication so that I know for sure I am getting what I am supposed to get in my browser?

    Met vriendelijke groet,

    (Philip) Wagenaar
    Assistent ICT Projecten & Advies

    AccoN Accountants & Adviseurs
    ICT Projecten & Advies
    Postbus 5090
    6802 EB Arnhem
    The Netherlands

    tel. +31 (0)26-3842384
    fax. +31 (0)26-3630222
    mobile: +31 (0)6-25388935
    MSN/E-mail: p.wagenaar@accon.nl
    http://www.accon.nl

    >>> "Ghaith Nasrawi" <libero@aucegypt.edu> 27-01-05 10:04 >>>
    why not using SSL (with self-signed/CA signed certificates) with a
    logon page? I think it's more scalable and client-independent.

    ---------- Initial Header -----------

    From : "Philip Wagenaar" p.wagenaar@accon.nl
    To : security-basics@securityfocus.com
    Cc :
    Date : Wed, 26 Jan 2005 12:24:20 +0100
    Subject : Betr.: RE: encryption

    > I was also looking at gnupg.
    >
    > There are alot of tools for it. Also signing HTML files. I was
    wondering if signing HTML files is useful. And if it is, anyone have
    any experience with it?
    >
    > Also, is it possible to encrypt HTML files and make them avalible
    for a specified number of users. I would have a webpage on my
    webserver. I would encrypt it gnupg/pgp.. and I would encrypt it for a
    number of users?
    >
    > Met vriendelijke groet,
    >
    > (Philip) Wagenaar
    > Assistent ICT Projecten & Advies
    >
    > AccoN Accountants & Adviseurs
    > ICT Projecten & Advies
    > Postbus 5090
    > 6802 EB Arnhem
    > The Netherlands
    >
    > tel. +31 (0)26-3842384
    > fax. +31 (0)26-3630222
    > mobile: +31 (0)6-25388935
    > MSN/E-mail: p.wagenaar@accon.nl
    > http://www.accon.nl
    >
    >
    > >>> "Robert Hines" <b.hines@comcast.net> 25-01-05 00:22 >>>
    > Alas, that would be because you have to pay for it now. In the
    olden day,
    > All the PGP features were free, but now the basic signing is free,
    the value
    > added protection is not.
    >
    > Bob
    >
    >
    >
    > "Pleasure in the job puts perfection in the work." - Aristotle
    384-322 BC
    >
    >
    > -----Original Message-----
    > From: Philip Wagenaar [mailto:pb.wagenaar@chello.nl]
    > Sent: Saturday, January 22, 2005 5:35 PM
    > To: security-basics@securityfocus.com
    > Subject: encryption
    >
    > Hi,
    >
    > Up to a few years ago PGP and encryption was an hot item. But it
    seems it
    > has stand still for a few years now. Google and PGP show up only pgp
    > programs that are more then years old.
    >
    > How is encryption these days? What has come by since PGP?
    >
    > Philip Wagenaar
    > http://www.wagenaar.123.nl
    >
    >
    > ----------------------------------------
    > I am using the free version of SPAMfighter for private users.
    > It has removed 3447 spam emails to date.
    > Paying users do not have this message in their emails.
    > Try www.SPAMfighter.com for free now!
    >
    >
    > ##################################################################
    >
    > Dit e-mailbericht is uitsluitend bestemd voor de geadresseerde.
    > De informatie hierin is vertrouwelijk, zodat het derden niet is
    > toegestaan om daarvan kennis te nemen of dit te verstrekken aan
    > andere derden. Indien u dit e-mail bericht ontvangt terwijl het
    > niet voor u bestemd is, verzoeken wij u contact op te nemen met
    > de afzender en de informatie te verwijderen van iedere computer.
    > Bij voorbaat dank.
    >
    > ==================================================================
    >
    > The information transmitted in this e-mail is intended only for
    > the person or entity to which it is addressed and contains
    > confidential information. Any review, retransmission or other
    > use by persons or entities other than the intended recipient is
    > prohibited. If you received this in error, please contact the
    > sender and delete the material from any computer. Thank you.
    >
    > ##################################################################
    >
    >
    #####################################################################################
    > This e-mail message has been scanned for Viruses and Content and
    cleared
    > by MailMarshal
    >
    #####################################################################################
    >

    -----

     (o_
     //\ Ghaith Nasrawi
     V_/_

    PAST, n.
    That part of Eternity with some small fraction of
    which we have a slight and regrettable
    acquaintance. A moving line called the Present
    parts it from an imaginary period known as the
    Future. These two grand divisions of Eternity, of
    which the one is continually effacing the other,
    are entirely unlike. The one is dark with sorrow
    and disappointment, the other bright with
    prosperity and joy. The Past is the region of
    sobs, the Future is the realm of song. In the one
    crouches Memory, clad in sackcloth and ashes,
    mumbling penitential prayer; in the sunshine of
    the other Hope flies with a free wing, beckoning
    to temples of success and bowers of ease. Yet the
    Past is the Future of yesterday, the Future is the
    Past of to-morrow. They are one -- the knowledge
    and the dream. (The Devil's Dictionary)

    ##################################################################

    Dit e-mailbericht is uitsluitend bestemd voor de geadresseerde.
    De informatie hierin is vertrouwelijk, zodat het derden niet is
    toegestaan om daarvan kennis te nemen of dit te verstrekken aan
    andere derden. Indien u dit e-mail bericht ontvangt terwijl het
    niet voor u bestemd is, verzoeken wij u contact op te nemen met
    de afzender en de informatie te verwijderen van iedere computer.
    Bij voorbaat dank.

    ==================================================================

    The information transmitted in this e-mail is intended only for
    the person or entity to which it is addressed and contains
    confidential information. Any review, retransmission or other
    use by persons or entities other than the intended recipient is
    prohibited. If you received this in error, please contact the
    sender and delete the material from any computer. Thank you.

    ##################################################################

    #####################################################################################
    This e-mail message has been scanned for Viruses and Content and cleared
    by MailMarshal
    #####################################################################################


  • Next message: Paris E. Stone: "RE: RPC over HTTP security"

    Relevant Pages

    • Re: encryption (added phishing)
      ... I would encrypt it gnupg/pgp.. ... >Up to a few years ago PGP and encryption was an hot item. ... >Dit e-mailbericht is uitsluitend bestemd voor de geadresseerde. ... >de afzender en de informatie te verwijderen van iedere computer. ...
      (Security-Basics)
    • Re: Betr.: Re: encryption
      ... And why is key length limited so much in PGP? ... Dit e-mailbericht is uitsluitend bestemd voor de geadresseerde. ... de afzender en de informatie te verwijderen van iedere computer. ... use by persons or entities other than the intended recipient is ...
      (Security-Basics)
    • Re:Betr.: RE: encryption
      ... Subject: Betr.: RE: encryption ... > Up to a few years ago PGP and encryption was an hot item. ... > Dit e-mailbericht is uitsluitend bestemd voor de geadresseerde. ... > de afzender en de informatie te verwijderen van iedere computer. ...
      (Security-Basics)
    • Re: Betr.: RE: encryption
      ... I would encrypt it gnupg/pgp.. ... >Up to a few years ago PGP and encryption was an hot item. ... >Dit e-mailbericht is uitsluitend bestemd voor de geadresseerde. ... >de afzender en de informatie te verwijderen van iedere computer. ...
      (Security-Basics)
    • Betr.: Re: encryption
      ... PGP will 'always' give out a non-commercial free personal version, ... >>Up to a few years ago PGP and encryption was an hot item. ... Dit e-mailbericht is uitsluitend bestemd voor de geadresseerde. ... Indien u dit e-mail bericht ontvangt terwijl het niet voor u bestemd is, verzoeken wij u contact op te nemen met de afzender en de informatie te verwijderen van iedere computer. ...
      (Security-Basics)