Solved

SSL Email certificate

Posted on 2007-04-10
9
203 Views
Last Modified: 2010-03-05
How do I go about encrypiting email. I work for doctors and they are beginning to want to email patient data to specialists for consulting/help with certain cases. While I tell them they shouldn't use email - they pay my salary and I do what I'm told. I've been told to get an email ssl cert for each client. How does that work exactly and how do I get them? Right now, our email is hosted - about 6 accounts.
0
Comment
Question by:prlit
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
  • 3
9 Comments
 
LVL 29

Expert Comment

by:Alan Huseyin Kayahan
ID: 18882724
             Hi prlit
               Verisign Digital ID is what you need (I use it too, a certificate icon appear in every mail).
              Details and pricing is below.
http://www.verisign.com/products-services/security-services/pki/pki-application/email-digital-id/index.html

Regards
0
 
LVL 11

Expert Comment

by:rvthost
ID: 18882981
Digital IDs (S/MIME) are one option, another is PGP.  

The basic idea for any of them is that to send an external person an encrypted email, you must have their public key.  So if you want to send me an encrypted email, you must have my public key in form of my digital ID certificate or my public PGP key.  If you install a Digital ID, you can "sign" your email to me, but you cannot encrypt it.  This link provides a fairly good overview, otherwise just search Experts-Exchange for "encrypting email" and you will get a pile of hits:

http://www.comodo.com/support/products/email_certs/outlook2003.html
0
 
LVL 1

Author Comment

by:prlit
ID: 18884010
I'm trying out Verisigns Digital ID. Does the other person have to have a cert as well?? When I try to send a test message, my options are to cancel the message or unencrypt.
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 11

Expert Comment

by:rvthost
ID: 18884045
Correct, to send an internet user an encrypted message, you must have THEIR public key.  
0
 
LVL 1

Author Comment

by:prlit
ID: 18884061
There's no way to call ahead with a "password" of some sort for them to decrypt the message?
0
 
LVL 29

Expert Comment

by:Alan Huseyin Kayahan
ID: 18884114
              No, other person does not have to have a cert. Your mails are under protection of Verisign and I dont think it can be decrypted.
0
 
LVL 1

Author Comment

by:prlit
ID: 18884125
Is that feasable with something other than verisign?
0
 
LVL 11

Accepted Solution

by:
rvthost earned 500 total points
ID: 18884489
prlit - No, it's all part of the public/private key infrastructure and it's what allows you to securely send encrypted email.

Review page 4 & 6 which discusses the process a bit:
http://www.verisign.com/stellent/groups/public/documents/guides/005326.pdf


By the way, Thawte offers free email certificates instead of Verisign's paid cert:
http://www.thawte.com/secure-email/personal-email-certificates/index.html
0
 
LVL 29

Expert Comment

by:Alan Huseyin Kayahan
ID: 18888837
              I wouldnt waste my time on things other than Verisign. And by the way, how would people trust to a free email certificate?
0

Featured Post

Resolve Critical IT Incidents Fast

If your data, services or processes become compromised, your organization can suffer damage in just minutes and how fast you communicate during a major IT incident is everything. Learn how to immediately identify incidents & best practices to resolve them quickly and effectively.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will help to fix the below error for MS Exchange server 2010 I. Out Of office not working II. Certificate error "name on the security certificate is invalid or does not match the name of the site" III. Make Internal URLs and External…
If you troubleshoot Outlook for clients, you may want to know a bit more about the OST file before doing your next job. IMAP can cause a lot of drama if removed in the accounts without backing up.
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
This is my first video review of Microsoft Bookings, I will be doing a part two with a bit more information, but wanted to get this out to you folks.

690 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question