Enabling Email Confidentiality through the use of通过使用电子邮件保密.pptVIP

Enabling Email Confidentiality through the use of Opportunistic Encryption Simson L. Garfinkel MIT Laboratory for Computer Science 1992 1992 PGP 2 Pretty Good Privacy How can PGP’s privacy be “pretty good,” if the software is so hard to use? Security Usability: The Big Idea Another View Email Encryption: 17 years and counting 1986: MailSafeRSA Data Security 1987: RFC 989Privacy Enhancement for Internet Electronic Mail (Obsoleted by 1040, 1113) 1998: RFC 2311S/MIME Version 2 Message Specification Wide Support for OpenPGP and S/MIME Why don’t we use encryption? First we thought the barrier was that people just didn’t have the software. Now everybody has the software… .. What’s wrong? Do we Needs Email Encryption? Email Signing Assures integrity Assures authorship Email Sealing Prevents unauthorized interception Minimizes damage from mail bounces Typical Applications Patient-doctor communications Depositor-bank communications Student records Business communications All email … ? Opportunistic Encryption Encrypt if you can. Don’t encrypt if you can’t. Don’t bother the user. SSL ssh Simple Mail Transport Protocol Simple Mail Transport Protocol (SMTP) SMTP with Opportunistic Encryption Simple Mail Transport Protocol Key Lessons: Lipner’s Law “The user base for strong cryptography declines by half with every additional keystroke or mouse click required to make it work.” - Steve Lipner, (formerly with Trusted Information Systems)As told by Carl Ellison(note: this is not Ellison’s law!) Sending Encrypted Mail Alice and Bob are security pros! What happens if I want to send an encrypted message to Jesse? Sending Sealed Mail to Jesse Does Jesse want encrypted mail? Does Jesse use S/MIME or PGP? How do I get Jesse’s public key? Does Jesse still have the matching private key? How do I add the key to my email client? How do I tell my client to encrypt the message? How can I be sure that the message was really encrypted? Jesse Receiving Sealed Mail If