Web Hosting Talk







View Full Version : SSL + email


dbbrock1
09-12-2002, 07:18 PM
Is it secure to send form info to an email address if its pretected by ssl? Thanks!

-Dan

mind21_98
09-12-2002, 08:00 PM
If the message itself is encrypted, yes. If it's not encrypted but an SSL link is used between you and the other ISP's mail server, it may still be secure. For the best security, the entire path between both users should be encrypted. :)

Richard Ward
09-12-2002, 11:25 PM
SMTP, SPOP, PGP, Korea.

NexDog
09-12-2002, 11:30 PM
Do they have PGP in Korea. :confused:

;)

hosty
09-13-2002, 02:17 PM
Originally posted by NexDog
Do they have PGP in Korea. :confused:

;)

why don't you go to www.instantssl.com and get a free email security certificate. if you are using outlook or outlook express (or I think any othe smime compliant email client) then you can send encrypted email and digitally sign your emails using this certificate. Its a standard certificate. This is a truly free service they offer for personal use only.

hosty

beachtrader
09-14-2002, 07:46 AM
I think a saw a script out there (don't know where right now) but basically it took the information gained through an SSL connection then encrypted it in PGP and sent it to an email address where it could be decoded. I think this would be what you are looking for--if I can find it I will post it.

ice53ltd
09-14-2002, 07:54 AM
Sorry, but just because you use SSL to send an email via a web form does not make it secure.

If email were a secure medium then products like PGP would never have been created... sending something by email has been likened to sending a postcard - would you put secure details on a postcard? Hope not. :eek:

Knogle
09-14-2002, 08:58 AM
Originally posted by hosty


why don't you go to www.instantssl.com and get a free email security certificate. if you are using outlook or outlook express (or I think any othe smime compliant email client) then you can send encrypted email and digitally sign your emails using this certificate. Its a standard certificate. This is a truly free service they offer for personal use only.

hosty

You could also use Verisign.. However Verisign's only got a 60 day free trial following which you're gonna have to pay for a cert. But anyway no harm installing both certs :laugh:

Knogle
09-14-2002, 09:02 AM
InstantSSL: http://www.instantssl.com/products/email.html
Verisign: http://www.verisign.com/products/email/index.html

enjoy :smokin:

beachtrader
09-14-2002, 04:58 PM
This is the script (actually several) I was referring to in my post.

http://www.verysimple.com/scripts/support_pgp.html