Security Basics mailing list archives
RE: Encrypted file system over Internet
From: "David Gillett" <gillettdavid () fhda edu>
Date: Wed, 30 Jul 2003 09:11:49 -0700
If you're referring to EFS (the "Encrypted File System" in Win 2K/XP), then the answer is NO. The encryption/decryption is local to the machine where the drive volume is locally attached, and file data accessed over the network travels unencrypted. If you want encrypted transport, you need to use IPSEC. David Gillett
-----Original Message----- From: news [mailto:news () main gmane org]On Behalf Of Michael Daigle Sent: July 29, 2003 20:26 To: security-basics () securityfocus com Subject: Encrypted file system over Internet If I understand on-the-fly-encryption correctly, I assume that information I read or write to a remote encrypted file container will be protected since cryptographic operations are performed in RAM on my local machine. Is this correct? Is there any need for encryption services for the actual network connection beyond the scope of authentication? Plainly, is my data safe (confidential) when it travels to and from my local machine when I access an encrypted partition on another machine through the Internet? ADVthanksANCE -------------------------------------------------------------- ------------- -------------------------------------------------------------- --------------
--------------------------------------------------------------------------- ----------------------------------------------------------------------------
Current thread:
- Encrypted file system over Internet Michael Daigle (Jul 30)
- RE: Encrypted file system over Internet David Gillett (Jul 30)