Re: security concerns about email with digital certificate by Miha
Miha
Fri Sep 17 08:35:49 CDT 2004
Hi,
You can use Outlook and other e-mail clients in secure way. You have to take
care of security on your computer (e.g. not run Kazaa and other peer to peer
applications on same computer that you use to write your confidential
documents and e-mails or use on-line bank service on).
Personally I have certificates for such purposes (on-line banking, secure
e-mail,...) stored on smart card. It does provide additional security --
while still not 100% secure, but close enough.
To protect your digital certificates, you must use:
a) secure OS (e.g. Windows 2000, Windows XP) with latest patches, antivirus,
personal firewall, etc...
b) strong - hard to guess password (password that has more then 14
characters)
If you don't use smart card for certificate storage, your password is the
one that is protecting your profile where your certificates are stored. If I
can guess your password easily then I can get to your certificates and use
them in your name...
Also OWA -- Exchange 2003 web mail client will also allow you to encrypt and
read encrypted e-mails using web mail client.
Mike
"digital" <anonymous@discussions.microsoft.com> wrote in message
news:233a01c49cb8$aba0bc90$a401280a@phx.gbl...
> By now in my personal opinion using web-based mail with
> IE is more secure than using OUTLOOK or Outlook Express.
> Although we can use outlook or OE to send and receive
> secure email with digital signature, there is potential
> insecurity after I download my emails to my computer--
> that is my computer could be hacked.... But when I use
> web-based email, I can hardly send encrypted email to
> others...
> What a headache.