RE: [U2] OT: Email encryption [not-secure]

2007-11-19 Thread Hennessey, Mark F.
My employer uses Tumbleweed. Be careful on how you setup the triggers
for securing e-mails. I have sent innocuous e-mails that our policies
flagged as requiring security (including to this list, hence the not
secure addition to the subject line!). Yet I can send an e-mail with
the phrase the root password to the Solaris server is makemydaygeek
and it would sail through...  Not Tumbleweed's fault, it's the arcane
policies we have setup...


Mark Hennessey

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Scott Ballinger
Sent: Friday, November 16, 2007 3:16 PM
To: u2-users@listserver.u2ug.org
Subject: Re: [U2] OT: Email encryption

I have a client that uses Tumbleweed to send secure emails. It works at
the email server level (these folks use Exchange), intercepting any
email message with the string ##SECURE in the subject. It then sends an
email to the recipient telling them they have a secure email waiting for
them at the client site; they need to connect to the site (via https by
clicking a link) and  authenticate themselves (or if first time create a
user  password), then they can view the text + attachments of the
original email. Works seamlessly with outlook+exchange and with
automatically generated emails from the UV/Linux system that use SMTP to
connect to the exchange server.
Should also work with other email clients. Not cheap, but pretty cool.

Another option would be pgp/gpg if full paranoia mode is required.

/Scott Ballinger
Pareto Corporation
Edmonds WA USA
206 713 6006
---
u2-users mailing list
u2-users@listserver.u2ug.org
To unsubscribe please visit http://listserver.u2ug.org/


Re: [U2] OT: Email encryption

2007-11-16 Thread Clifton Oliver
If the csv files are being generated by UniBasic, the language has  
encryption functions. Outside of basic, check out GPG. (http:// 
www.gnupg.org/)



--

Regards,

Clif

~~~
W. Clifton Oliver, CCP
CLIFTON OLIVER  ASSOCIATES
Tel: +1 619 460 5678Web: www.oliver.com
~~~


On Nov 16, 2007, at 8:26 AM, Brenda Price wrote:


We sometimes have to email csv files with sensitive information to our
clients.  Right now we are just setting a password to the zipped  
files.

We really need to encrypt either the whole email or just the attached
files.  We are using Microsoft Outlook.



Any ideas?



Brenda L Price

Senior Programmer Analyst

Affiliated Acceptance Corporation

Sunrise Beach, MO

(800)233-8483
---
u2-users mailing list
u2-users@listserver.u2ug.org
To unsubscribe please visit http://listserver.u2ug.org/

---
u2-users mailing list
u2-users@listserver.u2ug.org
To unsubscribe please visit http://listserver.u2ug.org/


[U2] OT: Email encryption

2007-11-16 Thread Brenda Price
We sometimes have to email csv files with sensitive information to our
clients.  Right now we are just setting a password to the zipped files.
We really need to encrypt either the whole email or just the attached
files.  We are using Microsoft Outlook.



Any ideas?



Brenda L Price

Senior Programmer Analyst

Affiliated Acceptance Corporation

Sunrise Beach, MO

(800)233-8483
---
u2-users mailing list
u2-users@listserver.u2ug.org
To unsubscribe please visit http://listserver.u2ug.org/


Re: [U2] OT: Email encryption

2007-11-16 Thread Jeffrey Butera
quote who='Brenda Price' date='Friday 16 November 2007'
 We sometimes have to email csv files with sensitive information to our
 clients.  Right now we are just setting a password to the zipped files.
 We really need to encrypt either the whole email or just the attached
 files.  We are using Microsoft Outlook.

We're using gpg to encrypt files and it's available for windows, unix and many 
other platforms.  The only issue with gpg is the recipient must have it 
installed and you have to exchange keys for them to decrypt the file once 
received.  You only need to exchange keys once and then can encrypt and 
decrypt as many files as you'd like...  

If you want more details let me know - I just documented this for another 
audience.


-- 
Jeff Butera, Ph.D.
Administrative Systems
Hampshire College
[EMAIL PROTECTED]
413-559-5556

That's why you have two ears and one mouth - 
   use them accordingly. Mike Golic
---
u2-users mailing list
u2-users@listserver.u2ug.org
To unsubscribe please visit http://listserver.u2ug.org/


RE: [U2] OT: Email encryption

2007-11-16 Thread Glen Batchelor
A Spectrum tech article would be nice. :)
nudges Cliff

 I'd be interested in seeing your GPG mail implementation guidelines and
perhaps a generic sample. I never got into GPG, but I've briefly thought
about integrating it before.


Glen Batchelor
IT Director
All-Spec Industries
 phone: (910) 332-0424
   fax: (910) 763-5664
E-mail: [EMAIL PROTECTED]
   Web: http://www.all-spec.com
  Blog: http://blog.all-spec.com


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:owner-u2-
 [EMAIL PROTECTED] On Behalf Of Jeffrey Butera
 Sent: Friday, November 16, 2007 1:41 PM
 To: u2-users@listserver.u2ug.org
 Subject: Re: [U2] OT: Email encryption
 
 quote who='Brenda Price' date='Friday 16 November 2007'
  We sometimes have to email csv files with sensitive information to our
  clients.  Right now we are just setting a password to the zipped files.
  We really need to encrypt either the whole email or just the attached
  files.  We are using Microsoft Outlook.
 
 We're using gpg to encrypt files and it's available for windows, unix and
 many
 other platforms.  The only issue with gpg is the recipient must have it
 installed and you have to exchange keys for them to decrypt the file once
 received.  You only need to exchange keys once and then can encrypt and
 decrypt as many files as you'd like...
 
 If you want more details let me know - I just documented this for another
 audience.
 
 
 --
 Jeff Butera, Ph.D.
 Administrative Systems
 Hampshire College
 [EMAIL PROTECTED]
 413-559-5556
 
 That's why you have two ears and one mouth -
use them accordingly. Mike Golic
 ---
 u2-users mailing list
 u2-users@listserver.u2ug.org
 To unsubscribe please visit http://listserver.u2ug.org/
---
u2-users mailing list
u2-users@listserver.u2ug.org
To unsubscribe please visit http://listserver.u2ug.org/


Re: [U2] OT: Email encryption

2007-11-16 Thread Scott Ballinger
I have a client that uses Tumbleweed to send secure emails. It works at the
email server level (these folks use Exchange), intercepting any email
message with the string ##SECURE in the subject. It then sends an email to
the recipient telling them they have a secure email waiting for them at the
client site; they need to connect to the site (via https by clicking a link)
and  authenticate themselves (or if first time create a user  password),
then they can view the text + attachments of the original email. Works
seamlessly with outlook+exchange and with automatically generated emails
from the UV/Linux system that use SMTP to connect to the exchange server.
Should also work with other email clients. Not cheap, but pretty cool.

Another option would be pgp/gpg if full paranoia mode is required.

/Scott Ballinger
Pareto Corporation
Edmonds WA USA
206 713 6006



On Nov 16, 2007 8:26 AM, Brenda Price [EMAIL PROTECTED] wrote:

 We sometimes have to email csv files with sensitive information to our
 clients.  Right now we are just setting a password to the zipped files.
 We really need to encrypt either the whole email or just the attached
 files.  We are using Microsoft Outlook.
---
u2-users mailing list
u2-users@listserver.u2ug.org
To unsubscribe please visit http://listserver.u2ug.org/


RE: [U2] OT: Email encryption

2007-11-16 Thread Brenda Price
What we need is something that the email recipient does not have to do
anything with except for use a key or password to open.

Some (probably 80%) of the recipients are not very technical (we're
talking about health clubs, tanning salons, etc) and they have to be
able to import the file(s) into whatever they are using.

We would definitely be looking at a cheap solution as it isn't an every
day thing.  

We have what we need to develop our own solution with just the .csv file
but it would really not be cost effective.

A piece of software that already exists under $100 for 2-4 licenses
would be great as it would get the job done cheaper and faster.

Brenda
---
u2-users mailing list
u2-users@listserver.u2ug.org
To unsubscribe please visit http://listserver.u2ug.org/


RE: [U2] OT: Email encryption

2007-11-16 Thread Eric Armstrong
We also use gpg (alias pgp).

Eric Armstrong
Programmer/Analyst
Lobel Financial

-Original Message-
From: Jeffrey Butera [mailto:[EMAIL PROTECTED]
Sent: Friday, November 16, 2007 10:41 AM
To: u2-users@listserver.u2ug.org
Subject: Re: [U2] OT: Email encryption


quote who='Brenda Price' date='Friday 16 November 2007'
 We sometimes have to email csv files with sensitive information to our
 clients.  Right now we are just setting a password to the zipped files.
 We really need to encrypt either the whole email or just the attached
 files.  We are using Microsoft Outlook.

We're using gpg to encrypt files and it's available for windows, unix and
many 
other platforms.  The only issue with gpg is the recipient must have it 
installed and you have to exchange keys for them to decrypt the file once 
received.  You only need to exchange keys once and then can encrypt and 
decrypt as many files as you'd like...  

If you want more details let me know - I just documented this for another 
audience.


-- 
Jeff Butera, Ph.D.
Administrative Systems
Hampshire College
[EMAIL PROTECTED]
413-559-5556

That's why you have two ears and one mouth - 
   use them accordingly. Mike Golic
---
u2-users mailing list
u2-users@listserver.u2ug.org
To unsubscribe please visit http://listserver.u2ug.org/
---
u2-users mailing list
u2-users@listserver.u2ug.org
To unsubscribe please visit http://listserver.u2ug.org/


Re: [U2] OT: Email encryption

2007-11-16 Thread Clifton Oliver
Would work if you can guarantee that all of your clients use Outlook.  
But a lot of folks won't go near the thing. ;-)



--

Regards,

Clif


On Nov 16, 2007, at 1:30 PM, Jerry Banker wrote:


Brenda,
If I'm not mistaken Outlook has an encryption feature built into it.
Jerry

---
u2-users mailing list
u2-users@listserver.u2ug.org
To unsubscribe please visit http://listserver.u2ug.org/


RE: [U2] OT: Email encryption

2007-11-16 Thread Tom Dodds
Here is a snippet from the Outlook help on encryption.  It looks like your
back to the public key/private key setup which is unacceptable

Encrypting an e-mail message in Microsoft Office Outlook 2007 protects the
privacy of the message by converting it from readable plaintext into
ciphered (scrambled) text. Only the recipient who has the private key
(private key: The secret key kept on the sender's computer that the sender
uses to digitally sign messages to recipients and to decrypt (unlock)
messages from recipients. Private keys should be password protected.) that
matches the public key (public key: The key a sender gives to a recipient so
that the recipient can verify the sender's signature and confirm that the
message was not altered. Recipients also use the public key to encrypt
(lock) e-mail messages to the sender.) used to encrypt the message can
decipher the message. 


Tom Dodds


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jerry Banker
Sent: Friday, November 16, 2007 3:31 PM
To: u2-users@listserver.u2ug.org
Subject: RE: [U2] OT: Email encryption

Brenda,
If I'm not mistaken Outlook has an encryption feature built into it.
Jerry

-Original Message-
From: Brenda Price [mailto:[EMAIL PROTECTED] 
Sent: Friday, November 16, 2007 10:27 AM
To: u2-users@listserver.u2ug.org
Subject: [U2] OT: Email encryption

We sometimes have to email csv files with sensitive information to our
clients.  Right now we are just setting a password to the zipped files.
We really need to encrypt either the whole email or just the attached
files.  We are using Microsoft Outlook.



Any ideas?



Brenda L Price

Senior Programmer Analyst

Affiliated Acceptance Corporation

Sunrise Beach, MO

(800)233-8483
---
u2-users mailing list
u2-users@listserver.u2ug.org
To unsubscribe please visit http://listserver.u2ug.org/
---
u2-users mailing list
u2-users@listserver.u2ug.org
To unsubscribe please visit http://listserver.u2ug.org/

__ NOD32 2664 (20071116) Information __

This message was checked by NOD32 antivirus system.
http://www.eset.com
---
u2-users mailing list
u2-users@listserver.u2ug.org
To unsubscribe please visit http://listserver.u2ug.org/


Re: [U2] OT: Email encryption

2007-11-16 Thread Jeff Butera

On Fri, 16 Nov 2007, Clifton Oliver wrote:

Would work if you can guarantee that all of your clients use Outlook. But a 
lot of folks won't go near the thing. ;-)


Amen to that.

Jeff Butera, Ph.D.
Administrative Systems
Hampshire College
[EMAIL PROTECTED]
413-559-5556

But Dad - I need most of your attention, not brother.
   Catherine Butera
---
u2-users mailing list
u2-users@listserver.u2ug.org
To unsubscribe please visit http://listserver.u2ug.org/