outlook secure email

[Guest]

Ever want to send an email with the same encryption you trust your credit
card on the web with? Well why the smoke didn't they come out with encryption
options. Any user can exchange a key they create with the desired second
party. This can be done via a key exchange email that is encrypted by Outlook
so only the recipient gets the plain text key. They can add to their key list
and then freely pass sensitive information across. Working in the government
industry, I can't tell you how convenient this would be.

----------------
This post is a suggestion for Microsoft, and Microsoft responds to the
suggestions with the most votes. To vote for this suggestion, click the "I
Agree" button in the message pane. If you do not see the button, follow this
link to open the suggestion in the Microsoft Web-based Newsreader and then
click "I Agree" in the message pane.

http://www.microsoft.com/office/com...66b31c946&dg=microsoft.public.outlook.general

 

[Roady [MVP]]

And how would that be more useful/different from current security
implementations?
-encrypted content
-digital signatures
-Digital IDs

Note that if Outlook comes with an exotic security mechanism you would only
be able to communicate with those clients through Outlook.

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003


-----
Ever want to send an email with the same encryption you trust your credit
card on the web with? Well why the smoke didn't they come out with
encryption
options. Any user can exchange a key they create with the desired second
party. This can be done via a key exchange email that is encrypted by
Outlook
so only the recipient gets the plain text key. They can add to their key
list
and then freely pass sensitive information across. Working in the government
industry, I can't tell you how convenient this would be.

 

[Vanguard]

Ever want to send an email with the same encryption you trust your
credit
card on the web with? Well why the smoke didn't they come out with
encryption
options. Any user can exchange a key they create with the desired
second
party. This can be done via a key exchange email that is encrypted
by Outlook
so only the recipient gets the plain text key. They can add to their
key list
and then freely pass sensitive information across. Working in the
government
industry, I can't tell you how convenient this would be.

You didn't think this one out at all. Just how would the recipient of
your encrypted message have anything to decrypt your message unless
you already sent it to them? Just how are you going to get your
exchanged "key" to just the targeted recipient that couldn't be
intercepted and used by someone else? Why would you ever want to
receive encrypted messages from someone else unless YOU chose to
receive encrypted messages? Do you like losing control over your
e-mails?

You don't know how x.509 certificates work. If you want someone to
send you an encrypted e-mail, you send them a digitally signed e-mail.
That is how you regulate even getting encrypted e-mails. That person
then saves and later uses your public key to encrypt their message
that they send to you. Then you use your private key to decrypt their
message. Even if someone else gets your public key, why would you
care? No one can decrypt a message that used your public key except
you. Thousands of users could use your public key to encrypt messages
but only those that YOU get can be decrypted using your private key
(it's *private* so don't go handing it out, else you will need to get
a new cert). So you enable someone to send you encrypted messages by
sending them your public key and only you can decrypt those message
using your private key.

There is no need for a "key list". You save the certs in digitally
signed messages that you received. THAT is how the other person lets
you send them encrypted messages. Then when you want to encrypt an
e-mail to them, you use their saved cert. Where are the certs saved?
Well, what do you think that Contacts folder is for?