Home All Groups Group Topic Archive Search About

Re: VB 2005 Email Programming

Author
18 Aug 2006 9:31 AM
C-Services Holland b.v.
aaron.ke***@gmail.com wrote:
> that doesn't mean that you surrender on the email front.
> you watch out for sniffers; you look for executable names; you look for
> md5 hashes
>
> you don't just sit there. email is not more insecure than anything else
> you do on the internet..
>
>

Then why did they invent encrypted connections like https, vpn, SSH etc.
Sure you can send sensitive information via email, just encrypt it with
PGP or something so that only the receiver can decode it. These
technologies exist for a reason.

Why do you think online banking or entering CC information on internet
shops use encrypted connections instead of uncrypted cleartext
transmissions?

How do you watch out for sniffers? If you have a method of detecting a
sniffer, please do tell.



--
Rinze van Huizen
C-Services Holland b.v

Author
21 Aug 2006 4:59 PM
aaron.kempf@gmail.com
it's just that it's over-simplifying to say that email is inherently
insecure.

that was my beef-- email isn't inherently insecure.

if it's mis-configured; it could be inappropriate to send pins via
email.

but if you're sending it to mainly corporate customers; then it might
not be as big of a deal as you alarmists made it up to be


-Aaron



C-Services Holland b.v. wrote:
Show quoteHide quote
> aaron.ke***@gmail.com wrote:
> > that doesn't mean that you surrender on the email front.
> > you watch out for sniffers; you look for executable names; you look for
> > md5 hashes
> >
> > you don't just sit there. email is not more insecure than anything else
> > you do on the internet..
> >
> >
>
> Then why did they invent encrypted connections like https, vpn, SSH etc.
> Sure you can send sensitive information via email, just encrypt it with
> PGP or something so that only the receiver can decode it. These
> technologies exist for a reason.
>
> Why do you think online banking or entering CC information on internet
> shops use encrypted connections instead of uncrypted cleartext
> transmissions?
>
> How do you watch out for sniffers? If you have a method of detecting a
> sniffer, please do tell.
>
>
>
> --
> Rinze van Huizen
> C-Services Holland b.v