22.12.2012 Views

Front cover - IBM Redbooks

Front cover - IBM Redbooks

Front cover - IBM Redbooks

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

ecently there were two competing standards for achieving this: PGP and<br />

S/MIME. Let’s first discuss PGP.<br />

6.2.8 Secure messaging with PGP<br />

PGP, which stands for “Pretty Good Privacy,” is a highly secure public key<br />

encryption system designed for sending secure mail anywhere around the world.<br />

It was developed by Mike Zimmerman in 1991, and published freely on the<br />

Internet. The client and information on PGP can be found at the following URL:<br />

http://www.pgp.com/<br />

Also available is GnuPG (Gnu Privacy Guard), which is a complete and free<br />

replacement for PGP. Because it does not use the patented IDEA algorithm, it<br />

can be used without any restrictions. GnuPG is an RFC2440 (OpenPGP)<br />

compliant application. Version 1.0.0 was released on September 7th, 1999. The<br />

current stable version is 1.2.2. GnuPG is free software. It can be freely used,<br />

modified and distributed under the terms of the GNU General Public License.<br />

Information on GPG can be found at the following URL:<br />

http://www.gnupg.org/<br />

Information on the GNU General Public License can be found at:<br />

http://www.gnu.org/copyleft/gpl.html<br />

PGP does not have key management capabilities. In fact, its certificate structure<br />

is a very loose one, in which, instead of having authorities issue certificates to<br />

individuals, it works on a “web of trust” model, where certificates gain authority by<br />

being signed by known and trusted people.<br />

A newer standard, called OpenPGP, permits a hierarchical approach to<br />

accommodate certificate authorities, X.509 certificates, and other<br />

already-accepted standards. More information on OpenPGP is at the following<br />

URL:<br />

http://www.openpgp.org/<br />

The OpenPGP Message Format is explained in RFC2440, available at:<br />

http://www.ietf.org/rfc/rfc2440.txt<br />

While PGP has seen some good adoption worldwide, most corporations are<br />

keen to implement S/MIME for messaging within and outside of the organization.<br />

We <strong>cover</strong> S/MIME in the next section and detail how this works in conjunction<br />

with the Lotus Notes client and Lotus Domino server.<br />

Chapter 6. Public key infrastructures 267

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!