Security Basics mailing list archives

Re: passing sensitive information over wire;options are not enough?


From: Vedantam Sekhar <vedantamsekhar () gmail com>
Date: Tue, 29 Mar 2011 12:19:51 +0530

One solution i can think of is making use of PKI&Digital certificates.
It ensures the mail communictation is encrypted but also intended
recipents can only see it. But limitation with that is, you may not be
able to ask all your partners to go for PKI. Intranet, it will be ok
to install an private CA which assigns certificates to each of the
users in the LAN.

Hope this may help,

Thanks,

Sekhar


On Sat, Mar 26, 2011 at 4:58 PM,  <a.alii85 () gamil com> wrote:
I want to know what are means and options available for exchanging password information over 
internet/extra-net/intranet?

In my opinion this is the least researched topic in the field of communication security.

I mean in the position i find myself right now where i'm asked to research and find alternative methods of exchange 
of credentials which does not include the usual which e.g email or sending it in a sealed envelope. The company i 
work in have business partners all over the world and we are in need of something quick,smart and secure.

Out of band management sounds right but then its so expensive and you can only do it with few limited number of 
clients not with hundred and thousands.

Is there one unified solution which could work for unlimited number of users and not just one or few?

Thank you. I need ideas and more practical ones

regards,
Me

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------



------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


Current thread: