Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

SSL Email certificate

Posted on 2007-04-10
9
Medium Priority
?
206 Views
Last Modified: 2010-03-05
How do I go about encrypiting email. I work for doctors and they are beginning to want to email patient data to specialists for consulting/help with certain cases. While I tell them they shouldn't use email - they pay my salary and I do what I'm told. I've been told to get an email ssl cert for each client. How does that work exactly and how do I get them? Right now, our email is hosted - about 6 accounts.
0
Comment
Question by:prlit
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
  • 3
9 Comments
 
LVL 29

Expert Comment

by:Alan Huseyin Kayahan
ID: 18882724
             Hi prlit
               Verisign Digital ID is what you need (I use it too, a certificate icon appear in every mail).
              Details and pricing is below.
http://www.verisign.com/products-services/security-services/pki/pki-application/email-digital-id/index.html

Regards
0
 
LVL 11

Expert Comment

by:rvthost
ID: 18882981
Digital IDs (S/MIME) are one option, another is PGP.  

The basic idea for any of them is that to send an external person an encrypted email, you must have their public key.  So if you want to send me an encrypted email, you must have my public key in form of my digital ID certificate or my public PGP key.  If you install a Digital ID, you can "sign" your email to me, but you cannot encrypt it.  This link provides a fairly good overview, otherwise just search Experts-Exchange for "encrypting email" and you will get a pile of hits:

http://www.comodo.com/support/products/email_certs/outlook2003.html
0
 
LVL 1

Author Comment

by:prlit
ID: 18884010
I'm trying out Verisigns Digital ID. Does the other person have to have a cert as well?? When I try to send a test message, my options are to cancel the message or unencrypt.
0
Nothing ever in the clear!

This technical paper will help you implement VMware’s VM encryption as well as implement Veeam encryption which together will achieve the nothing ever in the clear goal. If a bad guy steals VMs, backups or traffic they get nothing.

 
LVL 11

Expert Comment

by:rvthost
ID: 18884045
Correct, to send an internet user an encrypted message, you must have THEIR public key.  
0
 
LVL 1

Author Comment

by:prlit
ID: 18884061
There's no way to call ahead with a "password" of some sort for them to decrypt the message?
0
 
LVL 29

Expert Comment

by:Alan Huseyin Kayahan
ID: 18884114
              No, other person does not have to have a cert. Your mails are under protection of Verisign and I dont think it can be decrypted.
0
 
LVL 1

Author Comment

by:prlit
ID: 18884125
Is that feasable with something other than verisign?
0
 
LVL 11

Accepted Solution

by:
rvthost earned 1500 total points
ID: 18884489
prlit - No, it's all part of the public/private key infrastructure and it's what allows you to securely send encrypted email.

Review page 4 & 6 which discusses the process a bit:
http://www.verisign.com/stellent/groups/public/documents/guides/005326.pdf


By the way, Thawte offers free email certificates instead of Verisign's paid cert:
http://www.thawte.com/secure-email/personal-email-certificates/index.html
0
 
LVL 29

Expert Comment

by:Alan Huseyin Kayahan
ID: 18888837
              I wouldnt waste my time on things other than Verisign. And by the way, how would people trust to a free email certificate?
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you troubleshoot Outlook for clients, you may want to know a bit more about the OST file before doing your next job. IMAP can cause a lot of drama if removed in the accounts without backing up.
By default Outlook 2016 displays only one time zone in the Calendar. The following article explains how to display two time zones in one calendar view.
Get people started with the process of using Access VBA to control Outlook using automation, Microsoft Access can control other applications. An example is the ability to programmatically talk to Microsoft Outlook. Using automation, an Access applic…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
Suggested Courses

618 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question