Re: Encrypting and digitally signing e-mail messages

Sending mail with TLS would work.



On 2013-08-15, at 9:29 AM, "Chris Whisonant" <chris.whisonant@xxxxxxxxx>
wrote:

How many different domains/recipients outside of the company will require
this? Internal is fine, you just encrypt the message with the Notes

client

and make sure the recipient is a Notes address.

For external, there are various options. You can try acquiring x.509
certificates for all of your users requiring this (it seems that there

are

less and less SSL providers still issuing these certs) or you can

leverage

Lotus's cacert process (I've done this before for a customer, but it was
years ago) and the recipients will have to accept trust of your cert in
their mail clients. The external users aren't Notes, are they?

One of the more recent trends, though, is to send an email containing

only

a link to a website that would contain the text and/or attachment. Having
https securing the data and a username/password for access. If this is an
acceptable option from The DOL, this is something that could be done in
Domino natively with a customized database.


---------------------------------------------------

Thanks,
Chris
Personal Blog: http://cwhisonant.gotdns.com
Work Blog: http://www.bleedyellow.com/blogs/lotusnut


On Thu, Aug 15, 2013 at 8:17 AM, <rob@xxxxxxxxx> wrote:

From an employee in our HR department:

<snip>
We have discussed the need to send some emails by hr (e.g. medical
information) in a secured fashion. We did not do anything in the past
because of the expense. The DOL has issued final HIPAA rules on the
subject. The final rules make it clear that we have to take steps to
secure the sending of medical information.

I am going to need a way for a number of people in the hr dept to send
secure emails to people outside of the company as well as inside the
company.
</snip>

Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





From: Chris Whisonant <chris.whisonant@xxxxxxxxx>
To: "Lotus Domino on the IBM i (AS/400 and iSeries)"
<domino400@xxxxxxxxxxxx>,
Date: 08/15/2013 08:15 AM
Subject: Re: Encrypting and digitally signing e-mail messages
Sent by: domino400-bounces@xxxxxxxxxxxx



There are various ways to do this. What may help us out to start is to
know
what your general requirements are - why do you want to do this? Do you
have a customer who is requiring you to send s/mime?


---------------------------------------------------

Thanks,
Chris
Personal Blog: http://cwhisonant.gotdns.com
Work Blog: http://www.bleedyellow.com/blogs/lotusnut


On Thu, Aug 15, 2013 at 7:41 AM, <rob@xxxxxxxxx> wrote:

I was reading "Encrypting and digitally signing e-mail messages" at

http://publib.boulder.ibm.com/infocenter/domhelp/v8r0/topic/com.ibm.notes85.help.doc/sec_keys_mail_t.html

In there they mention "If you want to encrypt or sign mail that is

being

sent over the Internet, you must have an Internet certificate." Ok,

how

does one obtain this certificate? How does one use this certificate?

Do

you need a separate certificate for each Notes user who wants to

digitally

sign their messages?

Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com

_______________________________________________
This is the Lotus Domino on the IBM i (AS/400 and iSeries)

(Domino400)

mailing list
To post a message email: Domino400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/domino400.

_______________________________________________
This is the Lotus Domino on the IBM i (AS/400 and iSeries) (Domino400)
mailing list
To post a message email: Domino400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/domino400.


_______________________________________________
This is the Lotus Domino on the IBM i (AS/400 and iSeries) (Domino400)
mailing list
To post a message email: Domino400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/domino400.

_______________________________________________
This is the Lotus Domino on the IBM i (AS/400 and iSeries) (Domino400)

mailing list

To post a message email: Domino400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/domino400
or email: Domino400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/domino400.