Security Basics mailing list archives

Re: Email Encryption

From: Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>
Date: Wed, 14 May 2008 17:40:34 +0200

On 2008-05-14 pete.hill () sit-up tv wrote:

I am currently running through a PCI program at my company and am
looking for recommendations on an email encryption tool.

We currently use a licensed version of Winzip, but I have heard that
this may not be up to job as far as passing a PCI DSS audit is
concerned.

Is Winzip good enough?


No. Use either S/MIME or an OpenPGP implementation (namely GnuPG or PGP)
for e-mail encryption.

Regards
Ansgar Wiechers
-- 
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq

Current thread:

Email Encryption pete . hill (May 14)
- Re: Email Encryption Preston Kutzner (May 14)
  - Re: Email Encryption Adriel Desautels (May 14)
  - Re: Email Encryption m0untainrebel (May 14)
  - RE: Email Encryption Daniel I. Didier (May 14)
- Re: Email Encryption Gregory Boyce (May 14)
  - RE: Email Encryption TBarnhart (May 14)
    - Re: Email Encryption Adriel Desautels (May 15)
- Re: Email Encryption Ansgar -59cobalt- Wiechers (May 14)
- <Possible follow-ups>
- Re: Email Encryption khushbu . jithra (May 15)
- Re: Email Encryption khushbu . jithra (May 15)
- Re: Email Encryption Adriel Desautels (May 16)