Forum Moderators: phranque

Message Too Old, No Replies

How to encrypt emails and FTP connection?

         

irock

6:52 pm on Aug 11, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Hi, I run a decent size web business, and I'm concerned about the security of all outgoing email connection. So, anyone has hints as to how to encrypt FTP and email connection?

Thanks all!

oilman

7:16 pm on Aug 11, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



>>I'm concerned about the security of all outgoing email connection

as in you're concerned about someone intercepting outgoing mail from our smtp servers?

amoore

8:06 pm on Aug 11, 2003 (gmt 0)

10+ Year Member



Instead of FTP, you can use SFTP, which is pretty similar. SSH implements it for you, and if your current FTP client doesn't support it, you can probably find a good one that does. You may also want to look into SCP.

Email is a tougher story. If you mean the connection between your mail server and your machine, you may want to look into IMAP or POP over SSL. Mutt supports it at least. If you mean that you want to secure your mail between different mail servers, then that's even worse. Most other mail servers won't support it, but this mail from the linux-elitists list may help you out:
[zgp.org...]

-Andy

irock

4:42 pm on Aug 18, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Do you the likeihood that someone's unencrypted email could be 'read' by a hacker? If the chance is high, then how come no one bothers to encrypt their emails?

Also how do I implement SSL on my mail server anyway?

Thanks again!

BjarneDM

12:03 pm on Aug 19, 2003 (gmt 0)

10+ Year Member



ftp : the secure alternative is sftp which is part of ssh. On some ftp-servers yuo can refuse connections unless they are encrypted.

email : how to use ssl with your email server depends on what email server you have - there are many alternatives, both commercial and open source.

email : if you want client to client encryption then you'll need to use pgp or gpg. You can get an add-on to Mozilla - [enigmail.mozdev.org...] - that uses gpg to sign and encrypt email. The problem with client to client encryption is to agree on doing it and using the same product.