Utilization of PGP for improving on email security

Utilization of PGP for improving on email security

Do you think the utilization of PGP for improving on email security for sensitive material being transfered to and from a company within the banking sector is satisfactory or would another product be preferable?

    Requires Free Membership to View

    Login

    When you register, you'll begin receiving targeted emails from my team of award-winning writers. Our goal is to keep you informed on the hottest data and information management trends today.

    Hannah Smalltree, Editorial Director

    By submitting your registration information to SearchDataManagement.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchDataManagement.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

Gary:

I assume that the need for security in e-mail exchanged with financial institutions is to provide confidentiality for the message, assure message integrity, and offer non-repudiation of the message from the sender. You may want to evaluate PGP or any other product against these three requirements.

Digital signatures often provide these kinds of functions, and you should keep an eye on the development of the XML Signature, a joint specification of the Internet Engineering Task Force and World Wide Web Consortium (http://www.w3.org/Signature/). You also may want to review the ebXML technical report on security risk assessment issued in May 2001 (http://www.ebxml.org/specs/secRISK.pdf).

This was first published in January 2002