Educause Security Discussion mailing list archives

Re: [ICPL] Electronic Signatures


From: Info <info () COMPLYGUARDNETWORKS COM>
Date: Fri, 3 Sep 2004 11:35:43 -0400

If you are using secure IM for support, the number of seats sounds like it
would be small.

I suggest you try LivePerson or Human Helper. Human Helper is less expensive
than LP (maybe 50.00-75.00 per seat per month) and you would also have full
transcripts of the chats, something AOL cannot give you.

-----Original Message-----
From: The EDUCAUSE Security Discussion Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU]On Behalf Of Danny Lee
Sent: Friday, September 03, 2004 11:28 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] [ICPL] Electronic Signatures


Slightly off topic, but we are starting to use the free Thawte certificates
to secure AOL Instant Messaging. AIM is being used as part of our support
model, and adding a certificate ensures any sensitive information is
encrypted within our network. I wonder if anyone else is taking this
approach?

One of the challenges for us is that the cert is not stored by AOL; so a
user must install their cert in AIM on each workstation they use. Does
anyone have a better approach (other than purchasing a secure chat server -
we are not funded for that)?

-Danny

Danny Lee
Support Center Coordinator
CIRT-IRC (MSC02-1520)
University of New Mexico
2701 Campus Blvd, Albuquerque, NM 87131
TEL: (505) 277 8149


-----Original Message-----
From: The EDUCAUSE Security Discussion Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of James Moore
Sent: Friday, September 03, 2004 9:07 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] [ICPL] Electronic Signatures

Right now, some people just want the ability to digitally
sign email, so
that real email can be distinguished from spoofed.  I am looking at
becoming a Thawte notary so that they can get freemail certs,
and I can
be an on-campus notary.  Depending on load, we might have
more on-campus
notaries.  But Thawte freemail, seems to not be as common as it once
was, although still viable.  Anyone know what happened?

Anyone have a good solution/ war story about on or off campus
CA/Certs.


If you have implemented digital signatures, where did your customer
requirements come from?

Jim

P.S. Judy, when you get done with your presentation, please share it
with me too.
- - - -
Jim Moore, CISSP, IAM
Information Security Officer
Rochester Institute of Technology
13 Lomb Memorial Drive
Rochester, NY 14623-5603
(585) 475-5406 (office)
(585) 475-4122 (lab)
(585) 475-7950 (fax)

""In the middle of difficulty lies opportunity." Albert Einstein

"The release of new internet threats have not created a new
problem. It
has merely made more urgent the necessity of solving an existing one."
Parallels quote by Albert Einstein on atomic energy




-----Original Message-----
From: Institute for Computer Policy and Law Discussion Listserv
[mailto:ICPL () LISTSERV EDUCAUSE EDU] On Behalf Of Judy Caruso
Sent: Thursday, September 02, 2004 7:56 PM
To: ICPL () LISTSERV EDUCAUSE EDU
Subject: Re: [ICPL] Electronic Signatures

Kimberly - This is complicated. With electronic signatures via
E-Signature Act and FERPA regulations, you also have to establish
'consent" with the students to do contracts electronically. I
don't know
how you can get their consent without contacting each person
individually with adequate authentication, etc.  Some how you need to
first know that the person you asking for consent is really
the person.
Then, you can ask their consent. Then you can contract electronically
(using adequate authentication).

This year, for the first time, at UW-Madison, we issued IDs
for students
who accepted admission, even though they may never attend. During the
fall semester we'll remove the IDs for students who never show up.

I am preparing a presentation for EDUCAUSE on E-Signatures. When I'm
closer to ready, I'll be happy to share with you.

Good luck.
Judy

Judy Borreson Caruso
Director of Policy Security and Planning Division of Information
Technology UW-Madison ECAR Research Fellow EDUCAUSE Center for Applied
Research
608-263-7318
judy.caruso () wisc edu



----- Original Message -----
From: Kimberly Ballard-Washington <kbwash () UGA EDU>
Date: Thursday, September 2, 2004 4:04 pm
Subject: [ICPL] Electronic Signatures

Our University Housing wants to use electronic signatures
to contract
with incoming students.  Our University System does not "trust" the
technology currently.... but says we can go forth if we
must.  We are
readying to begin the process of using electronic
signatures in HR for

open enrollment, and will be using already established IDs for that
process.  With housing, many (most) of the students will
not have any
established IDs.

Any guidance, or methods to steer clear of what be helpful.  Thanks!

--
Kimberly Ballard-Washington
Associate Director for Legal Affairs
University of Georgia
Lustrat House
Athens, Georgia 30602-1693
Phone 706-542-0006   Fax: 542-3248
E-mail: kbwash () arches uga edu

**********
Participation and subscription information for this EDUCAUSE
Constituent Group discussion list can be found at
http://www.educause.edu/cg/.

**********
Participation and subscription information for this EDUCAUSE
Constituent
Group discussion list can be found at http://www.educause.edu/cg/.

**********
Participation and subscription information for this EDUCAUSE
Discussion Group discussion list can be found at
http://www.educause.edu/cg/.


**********
Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/cg/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.

Current thread: