Well put. and self-signed certificates are just as secure as $$$ ones. It's just a measure for companies to make money.
________________________________ From: Mayo, Bill [mailto:bem...@pittcountync.gov] Sent: Wednesday, June 24, 2009 4:18 PM To: NT System Admin Issues Subject: RE: IPhone 3g <Nightmare> I don't know all the specifics, but you can lock down the iPhone using tools provided by Apple. In other words, a business can deploy it in a fashion that isn't identical to buying one from Best Buy. Specifically, there is a remote wipe, and it has been there since version 2.0. I am not certain about limiting application purchases. OS 3.0 offers encryption, too. I don't personally understand concern about signed certificates. If the certificate isn't trusted, it warns you and gives you the option to continue. It doesn't just blindly accept it. If I'm setting it up for my business, I know if I am using self-signed certificates, and I know if the server I am connecting to is one I trust. I am not sure how it is more dangerous for users to be able to accept a self-signed certificate than you get just from the internet in general--you don't have to connect to an SSL site to get hosed. Internet Explorer on Windows does the same thing--it warns you about a self-signed certificate and leaves you free to continue. Is IE not "enterprise ready"? The way that single launch applications are handled on the iPhone, combined with the new push notifications leaves me wondering what kind of situation makes a lack of multitasking so problematic. Applications launch fast (very fast on the newest model) and come back just like you left them. Who cares that it wasn't running in the background, chewing up battery, while I was doing something else? Yes, there may be some specific instances where this would be useful, but I don't see this being an issue for the vast majority of situations. ________________________________ From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Wednesday, June 24, 2009 5:01 PM To: NT System Admin Issues Subject: RE: IPhone 3g <Nightmare> Security is the primary issue. There's no security on P2P connections through Bluetooth right now, i.e., great for sharing songs with people in range, but bad for "losing" company data in the same data stream. And, as mentioned previously, valid, signed certificates is another security area. iPhones do not multitask, i.e.,. you can only run one app at a time. iPhones are chained to iTunes. iTunes is a consumer-oriented service. Who really wants your users loading up "shake the baby" on business devices? There's currently no way to manage an iPhone inside the Enterprise, from app installations to remote wipe for stolen units. Others... From: Andrew Greene [mailto:agre...@cityofanderson.com] Sent: Wednesday, June 24, 2009 4:44 PM To: NT System Admin Issues Subject: RE: IPhone 3g <Nightmare> Sorry if this question seems like flame bait, but exactly which features does the iPhone need to have to be considered ready for the enterprise? Andrew Greene IS Technician / Webmaster City of Anderson From: Rod Trent [mailto:rodtr...@myitforum.com] Sent: Wednesday, June 24, 2009 4:27 PM To: NT System Admin Issues Subject: RE: IPhone 3g <Nightmare> The iPhone is still not a business unit. They are trying, and while the OS is at 3.0, the business side is still in beta, IMO. Apple has never catered to businesses - no matter how much folks have tried to integrate their products. The iPhone is the first device where Apple has been severely tasked by the customer to produce something that can work in both consumer and business sectors. They'll get it eventually, but 3.0 still does not provide everything. In addition, AT&T has stated publicly that there are certain features of the iPhone 3Gs and the 3.0 update that they either a) will still not support for a while, and b) may cost extra in the future. Watch your phone bill. From: Tim Vander Kooi [mailto:tvanderk...@expl.com] Sent: Wednesday, June 24, 2009 3:52 PM To: NT System Admin Issues Subject: RE: IPhone 3g <Nightmare> I see, so really your just touting the iPhone's lack of security features? ;-) Just blindly accepting a self-signed cert is really not a good security practice, even if it does make life a little simpler. That said, not using a trusted cert on OWA/Autodiscover truly is a matter of getting what you pay for. TVK From: Sam Cayze [mailto:sam.ca...@rollouts.com] Sent: Wednesday, June 24, 2009 2:19 PM To: NT System Admin Issues Subject: RE: IPhone 3g <Nightmare> Self Signed Certs. Nothing 'really amiss' here. Just have to import the CA Cert. ________________________________ From: Tim Vander Kooi [mailto:tvanderk...@expl.com] Sent: Wednesday, June 24, 2009 12:19 PM To: NT System Admin Issues Subject: RE: IPhone 3g <Nightmare> If setting up a Windows Phone (the new name for Windows Mobile from what I hear) takes more than entering a URL, a user name and a password then you've got something amiss in your systems. Should take around 45 seconds, depending on the length of those fields and the speed of your thumbs. TVK From: Steve Ens [mailto:stevey...@gmail.com] Sent: Wednesday, June 24, 2009 11:58 AM To: NT System Admin Issues Subject: Re: IPhone 3g <Nightmare> That is ironic. I setup my HTC in under a minute (actually timed it). So those iPhones must be wicked fast. ;-) On Wed, Jun 24, 2009 at 11:44 AM, Sam Cayze <sam.ca...@rollouts.com> wrote: Ironically, our iPhone was far easier to connect to our Exchange Server than our Windows Mobile Phones. ________________________________ From: Fogarty, Richard R CTR USA USASOC [mailto:rick.foga...@us.army.mil] Sent: Wednesday, June 24, 2009 11:42 AM To: NT System Admin Issues Subject: RE: IPhone 3g <Nightmare> Only if you have the app for it. From: Eric Wittersheim [mailto:eric.wittersh...@gmail.com] Sent: Wednesday, June 24, 2009 11:32 AM To: NT System Admin Issues Subject: Re: IPhone 3g <Nightmare> I thought the iPhone can cure cancer. On Wed, Jun 24, 2009 at 10:33 AM, Mark A. Ross <ma...@sdppayroll.com> wrote: Hello All. The boss just purchased an iPhone 3g. I believe the cure for cancer will be realized before I can get this "rock" to send and receive e-mail from our Exchange server. The folks at Apple were little or no help. They sent me links to various docs, which I found useless. Does anyone know the "trick" to getting an iPhone 3g to connect to an Exchange server? (2003). The server resides on our network, on the friendly side of our SonicWall firewall. I guess I'm spoiled with my Blackberry, which has a 2 minute setup process. Thanks a ton! Mark A. Ross (909) 946-2032 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
