Re: OT: encrypted email using web based application

2008-08-05 Thread Mohamad Faizul Zulkifli
how about squirrelmail and horde ?


On Fri, Aug 1, 2008 at 4:50 AM, Chad Perrin [EMAIL PROTECTED] wrote:

 On Wed, Jul 30, 2008 at 03:14:50PM +0200, Svein Halvor Halvorsen wrote:
  Andrew Gould wrote:
   If I start with Subject line with the word secure using my work's
 email
   system, the email is sent to a secure, web based application where the
   recipients can view the message securely.  The recipients receive a
 message
   that a secure email message is waiting for them there.  They have to
 create
   an account based upon their email address to view the message.  They do
 not
   have to recreate the accounts for future messages.
  
   This system is easy to use; and we don't have to worry about whether
 the
   recipients have PGP or GPG.  Is there an open source application that
 does
   this?
 
  How is this secure? Ok, I can see that if the message is served over
  https, then the network packages themselves cannot be sniffed
  easily. But as long as the recipient did not give you the key to
  use, then this is not secure. Why should the recipient trust the server?
 
  Whether there is an open source solution, I don't know however.

 It depends on your definition of secure -- which can vary from one
 circumstance to another.  If the emails in question are company
 property, there's no reason to consider access to the emails by company
 officials a breach of security.  On the other hand, if sensitive company
 information is sniffed in plain text on the network, that could be
 disastrous.

 From the sound of it, the circumstances the OP described refer to such a
 situation -- one where strict person-to-person privacy isn't a necessary
 goal of relevant security concerns.

 --
 Chad Perrin [ content licensed PDL: http://pdl.apotheon.org ]
 Scott McNealy: Microsoft is now talking about the digital nervous
 system.  I guess I would be nervous if my system was built on their
 technology too.




-- 
Mohamad Faizul Zulkifli
http://piju.fakap.net/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: OT: encrypted email using web based application

2008-07-31 Thread Chad Perrin
On Wed, Jul 30, 2008 at 03:14:50PM +0200, Svein Halvor Halvorsen wrote:
 Andrew Gould wrote:
  If I start with Subject line with the word secure using my work's email
  system, the email is sent to a secure, web based application where the
  recipients can view the message securely.  The recipients receive a message
  that a secure email message is waiting for them there.  They have to create
  an account based upon their email address to view the message.  They do not
  have to recreate the accounts for future messages.
  
  This system is easy to use; and we don't have to worry about whether the
  recipients have PGP or GPG.  Is there an open source application that does
  this?
 
 How is this secure? Ok, I can see that if the message is served over
 https, then the network packages themselves cannot be sniffed
 easily. But as long as the recipient did not give you the key to
 use, then this is not secure. Why should the recipient trust the server?
 
 Whether there is an open source solution, I don't know however.

It depends on your definition of secure -- which can vary from one
circumstance to another.  If the emails in question are company
property, there's no reason to consider access to the emails by company
officials a breach of security.  On the other hand, if sensitive company
information is sniffed in plain text on the network, that could be
disastrous.

From the sound of it, the circumstances the OP described refer to such a
situation -- one where strict person-to-person privacy isn't a necessary
goal of relevant security concerns.

-- 
Chad Perrin [ content licensed PDL: http://pdl.apotheon.org ]
Scott McNealy: Microsoft is now talking about the digital nervous
system.  I guess I would be nervous if my system was built on their
technology too.


pgpjFykVt5cPR.pgp
Description: PGP signature


OT: encrypted email using web based application

2008-07-30 Thread Andrew Gould
If I start with Subject line with the word secure using my work's email
system, the email is sent to a secure, web based application where the
recipients can view the message securely.  The recipients receive a message
that a secure email message is waiting for them there.  They have to create
an account based upon their email address to view the message.  They do not
have to recreate the accounts for future messages.

This system is easy to use; and we don't have to worry about whether the
recipients have PGP or GPG.  Is there an open source application that does
this?

Thanks,

Andrew
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: OT: encrypted email using web based application

2008-07-30 Thread Svein Halvor Halvorsen
Andrew Gould wrote:
 If I start with Subject line with the word secure using my work's email
 system, the email is sent to a secure, web based application where the
 recipients can view the message securely.  The recipients receive a message
 that a secure email message is waiting for them there.  They have to create
 an account based upon their email address to view the message.  They do not
 have to recreate the accounts for future messages.
 
 This system is easy to use; and we don't have to worry about whether the
 recipients have PGP or GPG.  Is there an open source application that does
 this?

How is this secure? Ok, I can see that if the message is served over
https, then the network packages themselves cannot be sniffed
easily. But as long as the recipient did not give you the key to
use, then this is not secure. Why should the recipient trust the server?

Whether there is an open source solution, I don't know however.


sv.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]