Re: Identity Based Encryption

[Michael Salmon <lonestarr13 () gmail com>]

HAK5 did a segment this year on Enigmail, which was mentioned in this email
chain already, and mailvelope (a Firefox/Chrome plugin for encypting GMAIL,
Yahoo, etc..).  In case anyone was interested in this, the tech segment
IMHO is really good.

http://hak5.org/episodes/hak5-1410



On Thu, Jun 27, 2013 at 10:45 AM, Oleg Laskin <oleglaskin () gmail com> wrote:

> Android has "APG" (Open PGP client) combined with K9 mail client (not
> coded by the same people) with which it integrates nicely.
> K9 works well with gmail as well.
>
> Oleg.
>
>
> On Thu, Jun 27, 2013 at 8:18 AM, Guillaume Ross <
> guillaume () binaryfactory ca> wrote:
>
> > I think it's worth noting that GPGMail for Mac now works great in
> > Mountain Lion, and can already work with a minor tweak in Mavericks. They
> > had to do a big update to handle the sandboxing but now that it is done I
> > don't expect OS X upgrades to cause major issues with it for a while.
> >
> > The question is: Does anyone know of a good way to read PGP/GPG emails on
> > mobile?
> >
> > I remember there was a "web app/javascript based thing" for iOS that
> > wasn't really stable but I don't think it's still alive.
> >
> > What are your favorite PGP/GPG capable mail clients for Android and iOS?
> > There doesn't seem to be much for iOS, and I'm pretty sure the fact that
> > bundling GPL stuff in App Store apps is impossible is one of the reasons
> > why.
> >
> > Guillaume
> >
> > On 2013-06-25, at 4:23 PM, Oleg Laskin <oleglaskin () gmail com> wrote:
> >
> > I would never recommend anyone to have third-party hold the private key.
> > Privates should stay private. :)
> >
> > Have you looked at GPG ? http://www.gnupg.org/
> >
> > It has multi-platform support and is free.
> > There is a windows-based software using GPG called GPG4Win (
> > http://www.gpg4win.org/ ) that provides encryption, email software and
> > includes an Outlook plugin.
> > I've used it in the recent past and it seemed to do the job nicely.
> >
> > Oleg.
> >
> >
> > On Tue, Jun 25, 2013 at 4:10 PM, Mrs. Y. <
> > networksecurityprincess () gmail com> wrote:
> >
> > > 1. Free/cheap
> > >
> > > 2. The private key can't be held by a 3rd party that may have to produce
> > > it to the feds without notifying owner.
> > >
> > > 3. VERY secure. It's my understanding that the IBE implementation from
> > > Voltage, while functional and easy to use, has some security issues.
> > >
> > > current proposed solution: Thunderbird with Enigmail plugin via portable
> > > apps on Ironkey.
> > >
> > >
> > >
> > >
> > > On 6/25/13 4:01 PM, Oleg Laskin wrote:
> > > > I am curious as to requirements: Are they looking for end-to-end
> > > > encryption internally or with select clients or with everyone ?
> > > >
> > > > IBE seems to provide an option for an on-site gateway as well as
> > > > cloud-based one: "... Voltage SecureMail can be deployed on-premise, or
> > > > delivered as SaaS from the Voltage SecureMail Cloud™ ..."
> > > >
> > > > I have used Cisco's Ironport Mail gateway with encryption options in
> > > the
> > > > past: it works but I am not a fan.
> > > >
> > > > Symantec has a PGP-based solution. Requirements may help narrow it
> > > down.
> > > > Oleg.
> > > >
> > > >
> > > > On Tue, Jun 25, 2013 at 10:00 AM, Mrs. Y
> > > > <networksecurityprincess () gmail com
> > > > <mailto:networksecurityprincess () gmail com>> wrote:
> > > >
> > > >     I'm in a position to recommend/suggest an encryption solution for
> > > email.
> > > >     The audience is *very* sensitive to privacy, but not very
> > > technical. IBE
> > > >     seems to solve this, but there are concerns with the PKG (private
> > > key
> > > >     generator) being in the cloudl. Thoughts?
> > > >
> > > >     _______________________________________________
> > > >     Pauldotcom mailing list
> > > >     Pauldotcom () mail pauldotcom com <mailto:
> > > Pauldotcom () mail pauldotcom com>
> > > >     http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > > >     Main Web Site: http://pauldotcom.com
> >
> > _______________________________________________
> > Pauldotcom mailing list
> > Pauldotcom () mail pauldotcom com
> > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > Main Web Site: http://pauldotcom.com
> >
> >
> >
> > _______________________________________________
> > Pauldotcom mailing list
> > Pauldotcom () mail pauldotcom com
> > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > Main Web Site: http://pauldotcom.com
>
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom () mail pauldotcom com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail pauldotcom com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com