[oclug] secure email

[Chris Church]

Dan Cardamore wrote:

> On Fri, Aug 16, 2002 at 09:53:19AM -0400, Bart Trojanowski wrote:
> > *: Application level encryption is the easiest to setup.  The
> > application either supports it (via patches or upgrades) or it does not.
> > There are a few choices here, but on this list we will tell you to use
> > GPG (gnupg or GNU Privacy Guard).  It is a method of encrypting every
> > mail with public key cryptography.  This method is setup by the user on
> > an application basis.  Each user you want to encrypt mail to must be
> > able to decrypt it using GPG (have a key, have software setup, etc).
> >
> > The most important thing about GPG/PGP is that you don't have to own the
> > machine (ie have root) to install it.  It's very safe and you cannot
> > screw up.  The worst you could probably do -- unless you try to make
> > mistakes -- is to make your key worthless.  To protect yourself learn
> > about PGP before you start.
>
> I suspect that he is concerned about clear text passwords being sent
> across when he gets his mail.  In that case GPG wouldn't help.
>
> Dan

Yes I am. I am looking into STARTTLS.

Chris

>
>
> __________________________________________________________________________
>     Dan Cardamore        mailto://dan@hld.ca         http://www.hld.ca
>  09:58:48 up 1 day, 23:07,  2 users,  load average: 0.20, 0.56, 0.39
>
>   ------------------------------------------------------------------------
>    Part 1.2Type: application/pgp-signature