Masud Hasan 03-60-475 SecueEmail VS Hushmail Project 2

Masud Hasan 03-60-475 SecueEmail VS Hushmail Project 2

Masud Hasan 03-60-475 SecueEmail VS Hushmail Project 2 Secure Email & Hushmail It uses Digital Certificate combined with S/MIME capable email clients to digitally sign and encrypt E-mail It uses Digital Certificate combined with OpenPGP

capable email clients to digitally sign and encrypt E-mail Two Basic Features The two basic features of Email security are privacy (only the intended recipient can read the message) and authentication (the recipient can be assured of the identity of the sender). The technical capabilities for these functions has been known for many years, but they have only been applied

to Internet mail recently. Reality Check: Security experts claim users encrypt only about one in every 50 to 100 of their email messages. Goal of this Project Learning Hushmail (PGP based secure Email) Compare Hushmail with SecureEmail(S/Mime based) Which one we should use to secure our Email?

Technical difference between those 2 protocols. Difference in Algorithm, Mechanism used. Hushmail How it works As part of enrollment, HushMail generates a public/private key pair for each user. The private key is encrypted with a pass-phrase and, along with the public key, stored on the HushMail server. When a HushMail user wishes to send a private

message, a Java applet on the user's PC will request his password. The password is securely hashed, and part of the hash is sent to the HushMail server to validate the user. If the user is authenticated, the HushMail server sends the user's plaintext public key and encrypted private key to the Java applet at the user's machine. The applet symmetrically decrypts the private key and uses it for digital Hushmail How it works

E-mail messages and attachments are symmetrically encrypted using a unique session key for each message. The session key is encrypted using a HushMail recipient's public key, and included in the message before transmission. When a recipient reads e-mail, a Java applet decrypts the encrypted message (and attachments). If the message is digitally signed, the Java applet downloads the sender's public key and

Features Enhanced Spam Control Webmail Updates File Sharing IMAP Access External POP3 System Requirements Browser: IE 5.0+, Netscape 7.0+ OS: Windows/Linux

Java Enabled: MSVM/SUN Hushmail for Outlook requires: Microsoft Office 2000, Microsoft Office XP, or Microsoft Office 2003. It also requires that Outlook's Collaboration Data Objects be installed. OnSite Installation tips Tips for Getting This Application Working in Internet Explorer:

Set Your Security Settings to Medium. The most common problem Internet Explorer users have with this application is that they set the security settings on their browser too high, disabling essential features such as JavaScript. This application recommends a security setting of "Medium". OnSite Installation Steps Run the Setup executable

(I recommend that you set up your email address in Outlook prior to installation) Accept License Agreement Complete Installation OnSite Outlook Configuration Open Microsoft Outlook.

Click the Hushmail icon on the Microsoft Outlook toolbar. Click the Add button. Specify whether you would like to digitally sign your outgoing mail. OnSite Continues.. OnSite

Continues.. OnSite SecureEmail VS Hushmail SecureEmail uses S/MIME. Hushmail uses OpenPGP. Both the protocols are designed to perform the same task. However, they are not compatible

with each other. The key distinguishing factor of these competing protocol is not the algorithm used to encrypt, but the technology used to establish OnSite Trust Establishment Hushmail defines trust: Through a Web of Trust which places the burden of trust on the end user.Its a

transitive relationship. If A trust B, and B trust C Then A will trust C Secure Email defines trust: Through a certificate authority (CA ) to establish trust. Every user is issued a certificate that contains his public key and is signed by a CA. Because CA is trusted third party, trust is automatically established among users. OnSite

Continues Secure Email follows X.509 standard format for digital signatures which can be only issued by a CA. Open PGP supports not X.509, but rather a digital certificate format developed by PGP Inc. Note: Industry Analyst say big corporations want the extra level of authority a CA brings to the table, as well as the better established X.509 digital certificate. (also include SSL

features for browsers) OnSite Continues Being said that, Users want encryption and digital certificate to be as simple as hitting the send button to shoot a message over the internet. Hush mail has easier user implementation than Secure Email. The algorithm used by both the

tools are equally strong. None of the Algorithm have been broken mathematically. OnSite Bottom line. The bottom line is both forms of trust the S/MIMEs third party CA and OpenPGPs Web of trust are viable. However, its a pity that they dont trust each other enough to work together.

Brighter Note: The evolution of both the protocols are now under the guidance of IETF working group. OnSite Services/ Mechanisms and Algorithm Used Services in a security protocol Signatures

RSA Encryption AES Hashing SHAI OnSite

Conclusion I would consider doing my graduate studies in Computer Security. Thanks for listening and good luck for Final. OnSite QUESTION Sones will be

Only easy answered! Kidding~~ OnSite

Recently Viewed Presentations

  • Work Programme - What we can learn for future commissioning

    Work Programme - What we can learn for future commissioning

    Guest representations include London Councils, Homeless charities, 3rd sector specialists, health providers, NOMS ESF, AOC. Achievements . Created the only collaborative primes group in the country . Jointly funded TfL account manager and developed employment model delivering better sustainable jobs...
  • Today we are going to learn about What

    Today we are going to learn about What

    Many adverbs are made by adding -ly onto the end of an adjective. Kind The boy kindly carried the old lady's bags. Strange It was strangely quiet in the village. Can you make a sentence using these adverbs? Adverbs can...
  • Figure 22.2 Gastrointestinal tract activities.

    Figure 22.2 Gastrointestinal tract activities.

    © 2014 Pearson Education, Inc. Figure 19.2a The lymphatic system. Internal. jugular vein. Entrance of. right lymphatic. duct into vein. Entrance of . thoracic duct
  • Elite theory of democracy - Govt.college for girls sector 11 ...

    Elite theory of democracy - Govt.college for girls sector 11 ...

    Elite theory of democracy In every society there is a class of people which is though small in number but has more control over political power. The power belonging to this class occupy command offices and provide leadership in ruling...
  • The Consumer Market - Colorado FFA

    The Consumer Market - Colorado FFA

    The Consumer Market Determining customer needs What is a consumer? A consumer is an individual or entity that uses goods and services. Most of the time we think of consumers as individuals but consumers can be schools, business, or other...
  • Ch. 19-Cattle and Cotton

    Ch. 19-Cattle and Cotton

    Cowboys and the Life on the Trail. Trail crews needed about 12 workers to manage a herd of 2,000 cattle.Wranglers were ranch hands that cared for the crew members' horses.Trail drives began in spring and ended in the fall. Cattle...
  • Lecture 1: The Electromagnetic Spectrum

    Lecture 1: The Electromagnetic Spectrum

    The Doppler Effect Shown by all types of waves Properties of Waves Waves are characterized by two numbers: Wavelength, l (size of the wave) Frequency, ν (number of waves/second) For sound waves, frequency more commonly called pitch For light waves,...
  • In what ways does your media product use, develop or ...

    In what ways does your media product use, develop or ...

    My film opening uses conventions of a real media product by being similar to other film openings. Our film opening is for the neo noir thriller genre, we used film openings such as Se7en and Shutter Island as inspiration.