RE: integrity and mail encryption

b.hines_at_comcast.net
Date: 10/31/05

  • Next message: ilaiy: "Re: Learning Network Security Basics" 
    To: <adrian.floarea@uti.ro>, "'Juan B'" <juanbabi@yahoo.com>, "'security basics'" <security-basics@securityfocus.com>
Date: Mon, 31 Oct 2005 21:07:10 +0000

    Adrian,

    Exactly, but I believe you do however need to generate a certificate public/private key pair to associate with a unique mail account. By using the senders public key, (or signing the mail), the recipient can encrypt a return mail with thier own private key and the sender's public key. The original sender can then decrypt the mail (given they have the original recipients public key from a previously signed mail). The key pair works on the premise that the private key is unique to the owner and not shared and the public key of the pair is a back door to allow a reverse hash of a private key encryption in timely manner. By using a Diffie Helman key exchange with an associated private key of say 256 bit AES or 128 bit 3DES encryption the message is very secure, this method provides non-repudiation (Accountability) and Mail signing hash (Integrity) and strong private key encryption (Confidentiality).

    Bob

    >
    > Hi Juan,
    >
    > You don't need any free tool. Outlook already knows to sign (for integrity)
    > and encrypt the messages according with S/MIME standard. As far as I know
    > you, Yahoo does not know S/MIME. If your message is only signed with
    > detached signature (like Outlook does), you can view' it in Yahoo.
    >
    > More details you can find on this link
    > www.dartmouth.edu/~deploypki/materials/modules/using/smime/outlook.doc.
    >
    > Security Product Team Leader
    > Adrian Floarea, CISA
    > Bucharest, Romania
    > Email: adrian.floarea@uti.ro
    >
    >
    > -----Original Message-----
    > From: Juan B [mailto:juanbabi@yahoo.com]
    > Sent: Saturday, October 29, 2005 11:52 PM
    > To: security basics
    > Subject: integrity and mail encryption
    >
    > Hi,
    >
    > I want to encrypt and check integrity of mail between two outlook clients,
    > does anyone knows about such a free tool?
    >
    > and what doing the same between an outlook client and web mail like yahoo?
    > is it possible?
    >
    > Thanks,
    >
    > Juan
    >
    >
    >
    > __________________________________
    > Yahoo! FareChase: Search multiple travel sites in one click.
    > http://farechase.yahoo.com
    >
    >

  • Next message: ilaiy: "Re: Learning Network Security Basics"

    Relevant Pages

    • RE: integrity and mail encryption
      ... Outlook already knows to sign (for integrity) ... detached signature (like Outlook does), you can view' it in Yahoo. ... I want to encrypt and check integrity of mail between two outlook clients, ...
      (Security-Basics)
    • Re: Clicking on the "SEND MAIL" tab
      ... "Manny Borges" wrote: ... Outlook Express is only a mail client. ... I am going to assume that you use yahoo with the web browser interface. ... FLKulchar ...
      (microsoft.public.windowsxp.general)
    • Re: Clicking on the "SEND MAIL" tab
      ... Outlook Express is only a mail client. ... These links you are talking about are mailto: ... I am going to assume that you use yahoo with the web browser interface. ... Since the basic function of this kind of link calls for a mail app and not a ...
      (microsoft.public.windowsxp.general)
    • Re: How do I download bulk emails to outlook?
      ... Inbox from the web mail interface. ... If you want the messages that Yahoo ... With Outlook closed, ... But I think I have a pop3 access. ...
      (microsoft.public.outlook.installation)
    • Re: OutlookXP defaults to 40-bit encryption
      ... >From form limited material I have read, if Outlook Express receives a signed ... Other S-MIME capable clients may or may-not ... item, which if received by OE, OE will use to encrypt with 3DES to my email identity. ... S-MIME capable clients and if/how they implement this encryption-preference functionality. ...
      (microsoft.public.security)