?
Solved

SSL Email certificate

Posted on 2007-04-10
9
Medium Priority
?
204 Views
Last Modified: 2010-03-05
How do I go about encrypiting email. I work for doctors and they are beginning to want to email patient data to specialists for consulting/help with certain cases. While I tell them they shouldn't use email - they pay my salary and I do what I'm told. I've been told to get an email ssl cert for each client. How does that work exactly and how do I get them? Right now, our email is hosted - about 6 accounts.
0
Comment
Question by:prlit
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
  • 3
9 Comments
 
LVL 29

Expert Comment

by:Alan Huseyin Kayahan
ID: 18882724
             Hi prlit
               Verisign Digital ID is what you need (I use it too, a certificate icon appear in every mail).
              Details and pricing is below.
http://www.verisign.com/products-services/security-services/pki/pki-application/email-digital-id/index.html

Regards
0
 
LVL 11

Expert Comment

by:rvthost
ID: 18882981
Digital IDs (S/MIME) are one option, another is PGP.  

The basic idea for any of them is that to send an external person an encrypted email, you must have their public key.  So if you want to send me an encrypted email, you must have my public key in form of my digital ID certificate or my public PGP key.  If you install a Digital ID, you can "sign" your email to me, but you cannot encrypt it.  This link provides a fairly good overview, otherwise just search Experts-Exchange for "encrypting email" and you will get a pile of hits:

http://www.comodo.com/support/products/email_certs/outlook2003.html
0
 
LVL 1

Author Comment

by:prlit
ID: 18884010
I'm trying out Verisigns Digital ID. Does the other person have to have a cert as well?? When I try to send a test message, my options are to cancel the message or unencrypt.
0
NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

 
LVL 11

Expert Comment

by:rvthost
ID: 18884045
Correct, to send an internet user an encrypted message, you must have THEIR public key.  
0
 
LVL 1

Author Comment

by:prlit
ID: 18884061
There's no way to call ahead with a "password" of some sort for them to decrypt the message?
0
 
LVL 29

Expert Comment

by:Alan Huseyin Kayahan
ID: 18884114
              No, other person does not have to have a cert. Your mails are under protection of Verisign and I dont think it can be decrypted.
0
 
LVL 1

Author Comment

by:prlit
ID: 18884125
Is that feasable with something other than verisign?
0
 
LVL 11

Accepted Solution

by:
rvthost earned 1500 total points
ID: 18884489
prlit - No, it's all part of the public/private key infrastructure and it's what allows you to securely send encrypted email.

Review page 4 & 6 which discusses the process a bit:
http://www.verisign.com/stellent/groups/public/documents/guides/005326.pdf


By the way, Thawte offers free email certificates instead of Verisign's paid cert:
http://www.thawte.com/secure-email/personal-email-certificates/index.html
0
 
LVL 29

Expert Comment

by:Alan Huseyin Kayahan
ID: 18888837
              I wouldnt waste my time on things other than Verisign. And by the way, how would people trust to a free email certificate?
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
Mailbox Overload?
Get people started with the process of using Access VBA to control Outlook using automation, Microsoft Access can control other applications. An example is the ability to programmatically talk to Microsoft Outlook. Using automation, an Access applic…
This Experts Exchange video Micro Tutorial shows how to tell Microsoft Office that a word is NOT spelled correctly. Microsoft Office has a built-in, main dictionary that is shared by Office apps, including Excel, Outlook, PowerPoint, and Word. When …
Suggested Courses
Course of the Month9 days, 11 hours left to enroll

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question