Educause Security Discussion mailing list archives

Re: Zip encryption


From: Alex Keller <alkeller () SFSU EDU>
Date: Fri, 11 Jun 2010 10:29:21 -0700

it should be noted that you can typically peruse the directory structure
and view all file names within a password protected zip archive without
having the password. in some cases, that may be unacceptable data leakage.

best,
alex

Alex Keller
Systems Administrator
Academic Technology, San Francisco State University
Office: Burk Hall 153 Phone: (415)338-6117 Email: alkeller () sfsu edu



On 6/11/2010 9:10 AM, Adam Nave wrote:
7-zip gets a lot simpler if you use the right-click menus. It should
be feasible to train specific people to create self-extracting
password protected 7z archives.

Sophos offers a free encryption tool that creates self-extracting
password protected archives. I'm sure it's not the only tool of its kind.
http://www.sophos.com/products/free-tools/sophos-free-encryption.html

If you want in-place /shared /folder encryption (for free) then
TrueCrypt is pretty much your only option. Otherwise your users will
be fumbling with multiple versions of the same zipped file,
overwriting each other's work and generally being confused. There is a
learning curve to TrueCrypt, but if you set it up correctly to start
(automouting the folder for instance), then it won't be too bad.

--Adam
 


Current thread: