Solved

SSL with Outlook

Posted on 2006-10-25
6
358 Views
Last Modified: 2008-03-17
Experts.
What is the difference between SelfSSL and purchasing an SSL certificate from Verisign.  I am not hosting a website and am only interested in securing OWA.  Thanks.
0
Comment
Question by:hckynt
  • 3
  • 2
6 Comments
 
LVL 23

Assisted Solution

by:Tim Holman
Tim Holman earned 60 total points
ID: 17803507
Technically, absolutely nothing.  The SSL cipher strength and security of your applications are identical.
It's all a matter of trust.
Big companies will use Verisign, as it's internationally recognised as a trusted authority that can issue certificates.
Small companies/home users can get away with self-signing SSL certificates, especially if there's only one IT administrator in the company.  Just make sure you keep the keys in a safe place.
0
 

Author Comment

by:hckynt
ID: 17803556
Thanks for thre quick response.  Please correct me if I am wrong but SelfSSL is free and Verisgin is like $1,000.00?  So I am paying the grand for "image and impression"?

Thanks!
0
 
LVL 18

Accepted Solution

by:
PowerIT earned 65 total points
ID: 17804627
No no, not for "image and impression'. The difference is that Verisign is an internationally trusted authority, which means that their root certificates are already added by default to the trusted certificates in your webbrowser. So when signing your website with a Verisign certificate it is automatically accepted by the browser. Which is very important for large scale sites which use a lot of https, but indeed not for your OWA.

J.
0
Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

 

Author Comment

by:hckynt
ID: 17804719
Thanks guys!  Great information.  Bottom line I guess, is with OWA only SelfSSl is the way to go.  Whern hosting a high traffice commerce website, verisigin is the way to go.  One more question.  Verisigin says I can add certificates for each user to encrypt their mail messages.  The cost I bwlieve is $20.00/yr.  Will adding these casue any problems if I implement the SelfSSL?  Thanks!!!!!
0
 
LVL 18

Expert Comment

by:PowerIT
ID: 17805944
No those won't create a problem. They are not used for SSL, but for encrypting the messega itself or for signing it (if that's what's in the certificate key usage).
Typically when encrypting mail the transmitter encrypts with the public key of the receiver, who then decrypts with his own private key.
When signing a mail, the  transmitter encrypts a hash ot the message with his own private key. Then the receiver decrypts the hash with his public key and compares it with a hash which he calculated himself. This is also used in non-repudiation schemes.
Of course, email client software must make this as transparent as possible for the user. You have to add that individual certificate to the client software.

J.
0
 

Author Comment

by:hckynt
ID: 17805986
Thank you all!
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
Never store passwords in plain text or just their hash: it seems a no-brainier, but there are still plenty of people doing that. I present the why and how on this subject, offering my own real life solution that you can implement right away, bringin…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now