Welcome, Guest. Please login or register.

Author Topic: E-Mail  (Read 3179 times)

Description:

0 Members and 1 Guest are viewing this topic.

Offline Zac67

  • Hero Member
  • *****
  • Join Date: Nov 2004
  • Posts: 2890
    • Show all replies
Re: E-Mail
« on: August 13, 2010, 07:40:31 AM »
Quote from: kolla;574523
... any e-mail program for Amiga that supports encryption of e-mail using SSL, aka S/MIME?


SSL != S/MIME

SSL encrypts the connection between (email) client and server during actual transport, nothing else. S/MIME encrypts the message end-to-end between the sending and the receiving email clients.

Network-wise, SSL works in the transport layer while S/MIME works within the message as a special form of MIME encoding (could somewhat be counted to the application layer).
 

Offline Zac67

  • Hero Member
  • *****
  • Join Date: Nov 2004
  • Posts: 2890
    • Show all replies
Re: E-Mail
« Reply #1 on: August 13, 2010, 06:49:04 PM »
@kolla
It makes a huge difference in what security you actually get. SSL/TLS only secures the transport. On the server, between external servers(!) and on your local HDD the message is not encrypted in any way. Nor can any manipulation be detected. For email, SSL/TLS can only provide (end-to-end) security in a closed or at least well-known environment. (And btw SSL and TLS are different things even if a user can neglect the difference. A developer/IT supporter can't.)

S/MIME encrypts the message, then you can transport it safely any which way you want without worrying about eavesdropping or manipulation and only the intended sender can decrypt it.

Makes hell of a difference for me. If I want to ensure confidential end-to-end communication I use S/MIME. If I want to secure login/account or traffic details in an insecure environment (esp. public hotspots, insecure wireless in general, untrusted LANs) I use SSL or TLS.

And stop kidding me about OSI's dead. It sure is but without the layered architecture the internet wouldn't be possible. We'd be stuck with 10base5 and there'd be no DSL or Wi-Fi at all. And probably you don't want to tell me that a hub, a switch or a router are exactly the same, do you?
 

Offline Zac67

  • Hero Member
  • *****
  • Join Date: Nov 2004
  • Posts: 2890
    • Show all replies
Re: E-Mail
« Reply #2 on: August 14, 2010, 10:19:36 AM »
Sorry, but imho it's VERY dangerous to state S/MIME and SSL are just the same - some poor sod will turn on SSL in his email proggie and think it's all perfectly safe from here to oblivion. Only to find out years later that it isn't worth a **** for his purpose.
(We've got some managers in the company arguing on that level, so I'm probably a bit sensitive here, sorry again.)