[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: I'm very interested in any info. you have to give.
- To: securedistros@nl.linux.org
- Subject: RE: I'm very interested in any info. you have to give.
- From: Michael.Owen@net-tel.co.uk
- Date: Fri, 18 Feb 2000 13:36:09 +0000
- In-Reply-To: <38AC44B7.91562A41@cstp.umkc.edu>
- Original-Encoded-Information-Types: IA5-Text, (2)(6)(1)(12)(0), (1)(2)(840)(113556)(3)(10)(1)
- Reply-To: securedistros@nl.linux.org
- Sender: owner-securedistros@nl.linux.org
- X400-Content-Identifier: RE: I'm very int
- X400-Content-Type: P2-1988 (22)
- X400-MTS-Identifier: ["/PRMD=NET-TEL/ADMD=Gold 400/C=GB/";ORANGE:0081-000218133609-0ef4]
- X400-Originator: Michael.Owen@net-tel.co.uk
- X400-Received: by mta "ice" in "/PRMD=net-tel/ADMD=gold 400/C=gb/"; Relayed; Fri, 18 Feb 2000 13:36:47 +0000
- X400-Received: by mta "net-tel" in "/PRMD=net-tel/ADMD=gold 400/C=gb/"; Relayed; Fri, 18 Feb 2000 13:36:09 +0000
- X400-Received: by "/PRMD=NET-TEL/ADMD=Gold 400/C=GB/"; Relayed; Fri, 18 Feb 2000 13:36:09 +0000
- X400-Recipients: securedistros@nl.linux.org
David L. Nicol wrote:
> nels weber wrote:
> >
<snip>
> There is not at this time a standard for encrypting the entire channel
> between mail servers, and it is unlikely that one will appear. When
> there is risk of people reading the traffic that goes by, a better
> solution is to encrypt the entire network into a "virtual private
> network."
Well, there is an Internet draft at the moment, and there are products emerging which support domain to domain-based encryption and signing. Check out http://www.ietf.org/internet-drafts/draft-ietf-smime-domsec-03.txt
for more details on the technical side of things.
When the only thing that you actually want to encrypt is email, using a VPN is sort of like duck hunting with a bazooka. You also lose encryption coverage to remote clients who don't want/have VPNs, but have mail encryption tools handy.
--
Michael
Michael Owen
IT Security Engineer
NET-TEL Computer Systems Ltd
Michael.Owen@net-tel.co.uk
-
Securedistros: A common list for all secured Linux distributions
Archive: http://humbolt.nl.linux.org/lists/