Thursday, September 12, 2002
Secure email messaging, and longing for Smartphones!
Posted by Andy Sjostrom in "ARTICLE" @ 12:42 AM
I just finished reading an interesting ZDNet article on secure messaging, called "Lock down your mobile e-mail". Actually, what made me start reading the article was the image of a Smartphone 2002 in the newsletter that linked to the article. See below!
The article stresses the fact that "Enterprises must take more care to secure the content of each e-mail message". The writers then break down the options into four major paths that address the security challenges in different ways:
"1. End-to-end encryption involves encrypting the message on the sender's desktop and decrypting it on the desktop of the recipient. Public-key cryptography is the most secure encryption technique. ... Both sending and receiving devices must have cooperating encryption software. The sender and recipient must each have access to the other's public key. Each must have his or her own private key available. ...
2. Boundary-to-boundary protection of the link or message content while in transit over particularly vulnerable links (for example, across the Internet), but transport unencrypted--"in the clear"--while within a trusted network. ...
3. In wireless networks, messages might be encrypted while traveling over the Internet, and possibly decrypted by the carrier and re-encrypted using another technology for transmission to the wireless device. ...
4. Staging server encryption places the encrypted message content or key on a staging server. An alert message is sent to the intended recipient, providing a link to the server. The recipient connects to the server over an SSL link, authenticates as required, and then the decrypted content is passed over the SSL link to the recipient's chosen device."
If you are interested in how Microsoft Mobile Information Server deals with secure messaging, you can download the white paper "An Overview of Security Features".
Now, all I wish for is to see Smartphone 2002s not only in ZDNet newsletters but in actual stores and in the hands of users!
The article stresses the fact that "Enterprises must take more care to secure the content of each e-mail message". The writers then break down the options into four major paths that address the security challenges in different ways:
"1. End-to-end encryption involves encrypting the message on the sender's desktop and decrypting it on the desktop of the recipient. Public-key cryptography is the most secure encryption technique. ... Both sending and receiving devices must have cooperating encryption software. The sender and recipient must each have access to the other's public key. Each must have his or her own private key available. ...
2. Boundary-to-boundary protection of the link or message content while in transit over particularly vulnerable links (for example, across the Internet), but transport unencrypted--"in the clear"--while within a trusted network. ...
3. In wireless networks, messages might be encrypted while traveling over the Internet, and possibly decrypted by the carrier and re-encrypted using another technology for transmission to the wireless device. ...
4. Staging server encryption places the encrypted message content or key on a staging server. An alert message is sent to the intended recipient, providing a link to the server. The recipient connects to the server over an SSL link, authenticates as required, and then the decrypted content is passed over the SSL link to the recipient's chosen device."
If you are interested in how Microsoft Mobile Information Server deals with secure messaging, you can download the white paper "An Overview of Security Features".
Now, all I wish for is to see Smartphone 2002s not only in ZDNet newsletters but in actual stores and in the hands of users!
