Solved

SSL with Outlook

Posted on 2006-10-25
6
364 Views
Last Modified: 2008-03-17
Experts.
What is the difference between SelfSSL and purchasing an SSL certificate from Verisign.  I am not hosting a website and am only interested in securing OWA.  Thanks.
0
Comment
Question by:hckynt
  • 3
  • 2
6 Comments
 
LVL 23

Assisted Solution

by:Tim Holman
Tim Holman earned 60 total points
ID: 17803507
Technically, absolutely nothing.  The SSL cipher strength and security of your applications are identical.
It's all a matter of trust.
Big companies will use Verisign, as it's internationally recognised as a trusted authority that can issue certificates.
Small companies/home users can get away with self-signing SSL certificates, especially if there's only one IT administrator in the company.  Just make sure you keep the keys in a safe place.
0
 

Author Comment

by:hckynt
ID: 17803556
Thanks for thre quick response.  Please correct me if I am wrong but SelfSSL is free and Verisgin is like $1,000.00?  So I am paying the grand for "image and impression"?

Thanks!
0
 
LVL 18

Accepted Solution

by:
PowerIT earned 65 total points
ID: 17804627
No no, not for "image and impression'. The difference is that Verisign is an internationally trusted authority, which means that their root certificates are already added by default to the trusted certificates in your webbrowser. So when signing your website with a Verisign certificate it is automatically accepted by the browser. Which is very important for large scale sites which use a lot of https, but indeed not for your OWA.

J.
0
Three Reasons Why Backup is Strategic

Backup is strategic to your business because your data is strategic to your business. Without backup, your business will fail. This white paper explains why it is vital for you to design and immediately execute a backup strategy to protect 100 percent of your data.

 

Author Comment

by:hckynt
ID: 17804719
Thanks guys!  Great information.  Bottom line I guess, is with OWA only SelfSSl is the way to go.  Whern hosting a high traffice commerce website, verisigin is the way to go.  One more question.  Verisigin says I can add certificates for each user to encrypt their mail messages.  The cost I bwlieve is $20.00/yr.  Will adding these casue any problems if I implement the SelfSSL?  Thanks!!!!!
0
 
LVL 18

Expert Comment

by:PowerIT
ID: 17805944
No those won't create a problem. They are not used for SSL, but for encrypting the messega itself or for signing it (if that's what's in the certificate key usage).
Typically when encrypting mail the transmitter encrypts with the public key of the receiver, who then decrypts with his own private key.
When signing a mail, the  transmitter encrypts a hash ot the message with his own private key. Then the receiver decrypts the hash with his public key and compares it with a hash which he calculated himself. This is also used in non-repudiation schemes.
Of course, email client software must make this as transparent as possible for the user. You have to add that individual certificate to the client software.

J.
0
 

Author Comment

by:hckynt
ID: 17805986
Thank you all!
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you thought ransomware was bad, think again! Doxware has the potential to be even more damaging.
One of the biggest threats in the cyber realm pertains to advanced persistent threats (APTs). This paper is a compare and contrast of Russian and Chinese APT's.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question