Re: e-mail and digital ID's (signing and encrypting)

On Thursday 23 August 2007 07:33:03 Aaron Birenboim wrote:
> Wesley J. Landaker wrote:
> > If you are smarter and are doing OpenPGP:
> >
> > http://www.ietf.org/rfc/rfc2440.txt
> > http://www.gnupg.org/
> > ... etc ...
>
> Right on!
>
> Definitely, go with gnupg/OpenPGP.
> It is supported out-of-the-box on many non-MS mailers,
> like Thunderbird, and AFAIK, there is a plug-in you can
> get for Outlook.
>
> There are FREE keyservers!
> The web-of-trust keysigning procedure (if your client demands is)
> is at least as good as buying a cert.  Probably better.

Yes, and despite that it works excellently in a decentralized manner, it 
also still works very well in a hierarchical "corporate" environment, as 
you can have a company signing key that signs all the keys for 
employees--essentially the equivalent of being your own CA--except that you 
can easily get peers (other businesses, customers, individuals, etc) to 
sign it if you so desire.

That said, S/MIME isn't *too* bad. At least it's [sort of] (mostly) 
standardized. Better than some proprietary Windows-only piece of junk 
system. There are plenty of those out there.

-- 
Wesley J. Landaker <[email protected]> <xmpp:[email protected]>
OpenPGP FP: 4135 2A3B 4726 ACC5 9094  0097 F0A9 8A4C 4CD6 E3D2

_______________________________________________
NMLUG mailing list
[email protected]
http://lists.b9.com/cgi-bin/mailman/listinfo/nmlug

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQBGzj5z8KmKTEzW49IRAqE0AJ91RHf1gTGcCM0YD/8sz5Tajj76fwCfSOBD
YvbpfMGRH2+bdQYuMskNwZ4=
=fyRW
-----END PGP SIGNATURE-----