Cameo wrote:
> charlie wrote:
>
>> Some government entities will not accept E-Mail from outside the .gov
>> or.mil domains. They will accept Fax.
>
> Not just govt, but other security conscious entities as well. However,
> as some posters noted earlier, such security cannot be assured with 3rd
> party fax services. The only secure fax is phone-to-phone, using POTS
> lines.
There is nothing more secure about *normal* faxing than sending *normal*
e-mails. After all, EVERY fax machine is equipped to receive a normal
(unencrypted) fax so it takes no effort by someone intercepting your fax
traffic to convert it to legible format. Same for unencrypted e-mail.
Encrypting e-mail is pretty easy and can be done for free. If you want
to *receive* encrypted emails, you get a free e-mail cert and then
digitally sign (with your public key) an e-mail you send to whomever you
want to receive their encrypted e-mails. You use your private key that
only you have to decrypt the e-mail.
Encrypting faxes is also possible - but just how many senders do you
know of that have installed the software needed to support it? How many
faxes has a recipient ever told you about that required encrypting the
fax traffic to their fax end? I've seen some article about encrypting
faxes but they don't encrypt the traffic outside the network and to the
recipient.
http://technet.microsoft.com/en-us/l.../cc751106.aspx
mentions encryption but that's BEFORE the fax device (between your host,
network, and fax device to the external world). That doesn't encrypt it
outside the fax device where interception occurs. Encrypted faxes
(using special fax devices or software) will look like chicken scratches
if printed on a normal fax machine.
Again, unless encrypted, there is nothing more secure about a fax
transmission than an e-mail transmission. That the gov't are idiots and
attached to archaic technology is not really a surprise to everyone not
in the gov't.
http://global-security-solutions.com/ProtectFax.html
http://www.crypto.ch/fileadmin/01_cr...21-EN_0711.pdf
http://www.nabishi.com/fax-encryption.htm
Do you know of *free* encrypting fax software or fax devices? Even if
so, do you send those encrypted faxes to anyone other than to yourself
(i.e., within divisions of your own company)? That is, to whom have you
ever sent an encrypted fax assuming you had the means to encrypt the fax
that you send?
I haven't dealt with any military entities to send faxes to know if they
truly refuse to accept e-mails. I have sent e-mails to several .gov
entities when they claimed they only accepted fax but were told that I
had no fax functionality (I lied and did but didn't want to do faxing
and preferred e-mail) and they'd give me an e-mail address. They'd
often say that they needed a hardcopy and why they needed a fax copy,
whereupon I would remind them that their fax machine is nothing much
more than a printer and they could also print their e-mails. On some
occasions, they would accept the e-mail but required me to send in a
paper copy; however, in all cases, they ended up printing the e-mail,
anyway (gee, the letter must've gotten lost in the postal mail so you'll
have to print the e-mail copy before the arbitrary deadline). There are
a lot of idiots in gov't and business who only know what they've been
told is "policy" but you can often make them bend or break those rules.