In order to securely process orders and send messages over the company network, I will need to make sure information is properly encrpyted. My company will have its own public key which will be given to all employees. The public key will enable messages or orders with classified information to turn from plaintext to ciphertext making it useless, garbled information.
Only myself, and a few other high-ranking administrators will have acess to the private key. The private key will enable decryption of an encrypted message. If an employee needs a message to be decrypted, someone with acess to the private key will decrypt it.
As is required by law, my company will have a digital certificate to identify an e-mail as one that was sent from my company. It proves the legitimacy of the e-mail and helps to fight phishing. If customers are receiving order confirmations and the like, they need to know that it's coming from my company's website and that it's not a fraudulent message with malware embedded in it.
Thursday, November 6, 2008
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment