Re: TLS anyone?

Hi Marco,

On Dec 15, 2004, at 14:44, Marco Laurenzano wrote:

> I'm generically interested in this practice.

Ok. Playing devil's advocate: what would be the rational of "securing" 
email's "last mile" when the entire email path is insecure in its very 
nature?

Also, how do you manage your keys? Do you use self-signed certificates 
for the sole purpose of encrypting connections? Or are you interested 
in authenticating the host you are connecting to as well?

> If it's useful to anybody, I already have such a functionality on my 
> Zoe setup (on windows server) using delegate.

Cool. Does anyone else tunnel their connection over a secure link of 
some sort? VPN? SSH? Care to share you experiences in setting up such 
environment?

> The difference is that, with delegate, you can create several virtual 
> paths like:
> https://www.myserver.com/zoe
> https://www.myserver.com/spambayes
> etc...
> with the advantage that the firewall then can expose only delegate to 
> the internet (which is kinda meant for that).
>
> I usually use different clients and I like the idea of having all my 
> emails all in one place. Using stunnel I also secured the SMTP relay 
> provided by Zoe so, whatever client I'm using, I can relay emails 
> through Zoe (and have them archived) or search for something (via 
> delegate) everything in a secured fashion.

Well, at least one link is secure :)

I thing that the only point of having build-in TLS support in ZOE 
itself is more for the sake of convenience than anything else as this 
would allow the different application's services to use STARTTLS when 
necessary without any further need for additional configurations. It 
also remove the need to have to explicitly manage the PKI as the app 
can generate its own self-signed certificate when necessary.

Cheers,

R.



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/