Educause Security Discussion mailing list archives
Re: [ICPL] Electronic Signatures
From: Harold A'Hole <madman () MYEASTSIDE COM>
Date: Fri, 3 Sep 2004 08:45:43 -0700
Danny, I think RSA may have some sort of web-based certificate delivery mechanism, but it's probably more expensive. I've used Yozons for doing this with docs that need to be kept private and also to sign sales docs online. They are web-based and pretty cheap, but I don't think it can be used for AIM. I know that we tried free certs and we couldn't even get all of our IT folks to do it successfully. Harry ----- Original Message ----- From: "Danny Lee" <abqdan () UNM EDU> To: <SECURITY () LISTSERV EDUCAUSE EDU> Sent: Friday, September 03, 2004 8:27 AM Subject: Re: [SECURITY] [ICPL] Electronic Signatures
Slightly off topic, but we are starting to use the free Thawte
certificates
to secure AOL Instant Messaging. AIM is being used as part of our support model, and adding a certificate ensures any sensitive information is encrypted within our network. I wonder if anyone else is taking this approach? One of the challenges for us is that the cert is not stored by AOL; so a user must install their cert in AIM on each workstation they use. Does anyone have a better approach (other than purchasing a secure chat
server -
we are not funded for that)? -Danny Danny Lee Support Center Coordinator CIRT-IRC (MSC02-1520) University of New Mexico 2701 Campus Blvd, Albuquerque, NM 87131 TEL: (505) 277 8149-----Original Message----- From: The EDUCAUSE Security Discussion Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of James Moore Sent: Friday, September 03, 2004 9:07 AM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: Re: [SECURITY] [ICPL] Electronic Signatures Right now, some people just want the ability to digitally sign email, so that real email can be distinguished from spoofed. I am looking at becoming a Thawte notary so that they can get freemail certs, and I can be an on-campus notary. Depending on load, we might have more on-campus notaries. But Thawte freemail, seems to not be as common as it once was, although still viable. Anyone know what happened? Anyone have a good solution/ war story about on or off campus CA/Certs. If you have implemented digital signatures, where did your customer requirements come from? Jim P.S. Judy, when you get done with your presentation, please share it with me too. - - - - Jim Moore, CISSP, IAM Information Security Officer Rochester Institute of Technology 13 Lomb Memorial Drive Rochester, NY 14623-5603 (585) 475-5406 (office) (585) 475-4122 (lab) (585) 475-7950 (fax) ""In the middle of difficulty lies opportunity." Albert Einstein "The release of new internet threats have not created a new problem. It has merely made more urgent the necessity of solving an existing one." Parallels quote by Albert Einstein on atomic energy -----Original Message----- From: Institute for Computer Policy and Law Discussion Listserv [mailto:ICPL () LISTSERV EDUCAUSE EDU] On Behalf Of Judy Caruso Sent: Thursday, September 02, 2004 7:56 PM To: ICPL () LISTSERV EDUCAUSE EDU Subject: Re: [ICPL] Electronic Signatures Kimberly - This is complicated. With electronic signatures via E-Signature Act and FERPA regulations, you also have to establish 'consent" with the students to do contracts electronically. I don't know how you can get their consent without contacting each person individually with adequate authentication, etc. Some how you need to first know that the person you asking for consent is really the person. Then, you can ask their consent. Then you can contract electronically (using adequate authentication). This year, for the first time, at UW-Madison, we issued IDs for students who accepted admission, even though they may never attend. During the fall semester we'll remove the IDs for students who never show up. I am preparing a presentation for EDUCAUSE on E-Signatures. When I'm closer to ready, I'll be happy to share with you. Good luck. Judy Judy Borreson Caruso Director of Policy Security and Planning Division of Information Technology UW-Madison ECAR Research Fellow EDUCAUSE Center for Applied Research 608-263-7318 judy.caruso () wisc edu ----- Original Message ----- From: Kimberly Ballard-Washington <kbwash () UGA EDU> Date: Thursday, September 2, 2004 4:04 pm Subject: [ICPL] Electronic SignaturesOur University Housing wants to use electronic signaturesto contractwith incoming students. Our University System does not "trust" the technology currently.... but says we can go forth if wemust. We arereadying to begin the process of using electronicsignatures in HR foropen enrollment, and will be using already established IDs for that process. With housing, many (most) of the students willnot have anyestablished IDs. Any guidance, or methods to steer clear of what be helpful. Thanks! -- Kimberly Ballard-Washington Associate Director for Legal Affairs University of Georgia Lustrat House Athens, Georgia 30602-1693 Phone 706-542-0006 Fax: 542-3248 E-mail: kbwash () arches uga edu ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/cg/.********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/cg/. ********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/cg/.********** Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/cg/. ********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/cg/.
Current thread:
- Re: [ICPL] Electronic Signatures James Moore (Sep 03)
- <Possible follow-ups>
- Re: [ICPL] Electronic Signatures Danny Lee (Sep 03)
- Re: [ICPL] Electronic Signatures Info (Sep 03)
- Re: [ICPL] Electronic Signatures Harold A'Hole (Sep 03)
- Re: [ICPL] Electronic Signatures Mike Austin (Sep 03)
- Re: [ICPL] Electronic Signatures King, Dennis C. (Sep 05)