Re: product to send confidnetial informatiion to clients

[Tyler Johnson <rhathar () gmail com>]

PGP Desktop is definitely the way to go if this is a real commercial
environment. One of its main strong suits, on top of being technically
sound, is that it's transparent to the user.

Situation: User A with PGP sends User B an encrypted email.

Scenario 1: User B also has PGP; they receive the email normally (and securely).
Scenario 2: User B does not have PGP and instead receives an
unencrypted email telling them they have a secure message waiting for
them at $URL which requires their authentication to view.

Tyler

On Tue, Mar 1, 2011 at 7:38 AM, Todd Haverkos <infosec () haverkos com> wrote:
> Juan B <juanbabi () yahoo com> writes:
>
> > hi all
> >
> > I am looking for a product/application which will manage all the sending of
> > information to 3 parties working with the bank.
> >
> > I dont mean to implement a VPN or ssh. Im looking for a app which will manage
> > sending information in a secure way.
> >
> > someone knows about such an application?
>
> Hi Juan,
>
> PGP Desktop  is one the usual commercial solutions to this problem:
> http://www.pgp.com/products/packages/desktop_corporate/index.html
>
> The information creator would encrypt the information and include the
> public keys of the 3 parties, and send it out.  That way, only those 3
> parties can view it.  All 3 parties will need the same software.
>
> You can do the same things for free with free GPG, but you'll
> generally need more technical users to pull it off without a lot of
> angst.  Public key crypto is hard enough for normal folks to wrap
> their head around that there is value in making it a bit
> easier/prettier in this case, at least in my experience.
>
> Best Regards,
> --
> Todd Haverkos, LPT MsCompE
> http://haverkos.com/
>
> ------------------------------------------------------------------------
> Securing Apache Web Server with thawte Digital Certificate
> In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
> how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
> purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
> set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
> certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------