Security

RFC 2015 - MIME Security with Pretty Good Privacy (PGP) RFC 2015 - MIME Security with Pretty Good Privacy (PGP)- Describes how Pretty Good Privacy (PGP) can be used to provide privacy and authentication using the Multipurpose Internet … RFC 1991 - PGP Message Exchange Formats RFC 1991 - PGP Message Exchange Formats- Describes versions 2.x of PGP. Specifically, versions 2.6 and 2.7 conform to this specification. Version 2.3 conforms to this specificatio… RFC 2440 - OpenPGP Message Format RFC 2440 - OpenPGP Message Format- Maintained in order to publish all necessary information needed to develop interoperable applications based on the OpenPGP format. Obsoleted by … PGP Key signing policy of Juergen Nieveler PGP Key signing policy of Juergen Nieveler- PGP Key and Key signing policy of Juergen Nieveler. Draft - Multiple Signatures using Security Multiparts Draft - Multiple Signatures using Security Multiparts- Describes how the Security Multiparts defined in RFC 1847 can be used to transport multiple digital signatures. SKS keyservers SKS keyservers- Provides services for the SKS keyservers used by OpenPGP. MIT PGP Key Server MIT PGP Key Server- Public key server hosted by MIT. The WWW Based Key Server System The WWW Based Key Server System- Get PGP keys through a web interface. The Apache Software Foundation: How To OpenPGP The Apache Software Foundation: How To OpenPGP- Instructions for widely used cryptography clients. Riseup.net: OpenPGP Best Practices Riseup.net: OpenPGP Best Practices- Advanced tutorial about configuring GnuPG with suggested changes to the gpg.conf file. PGP Email Encryption Tutorial: A Basic Guide To GPG PGP Email Encryption Tutorial: A Basic Guide To GPG- A guide for beginners on how to encrypt emails using Thunderbird, GPG4Win and Enigmail. PGP Info Index PGP Info Index- Advanced tutorial on creating and signing PGP keys with GPG, concentrates on command line usage. The comp.security.pgp FAQ The comp.security.pgp FAQ- Answers many questions about the Pretty Good Privacy encryption/authentication program. Keysigning Party How-To Keysigning Party How-To- A draft guide to organizing or participating in a PGP key signing party. e-ignite: e-ignite:- Offers tutorials on setting up and using OpenPGP encryption software, use of cryptography, e-mail encryption, and links to related software and websites. Introduction to PGP Introduction to PGP- General information about PGP, especially for beginners: What it is, how it works, and where to get it. GnuPG Frequently Asked Questions GnuPG Frequently Asked Questions- A pretty good FAQ for the GNU Privacy Guard. Tom McCune's PGP Questions & Answers Tom McCune's PGP Questions & Answers- A superior resource website which bridges many of the gaps between existing PGP FAQs and the use of official Windows versions of PGP. PGP Attack FAQ PGP Attack FAQ- A FAQ about methods of attacking PGP. Strong Distribution HOWTO Strong Distribution HOWTO- A guide to using PGP in software distribution. Targeted at free software developers. ConsumerSearch ConsumerSearch- Links and reviews of anti-virus software review sites. AV-Comparatives AV-Comparatives- Comparative detection capability tests of various popular antivirus products. Virus Bulletin Virus Bulletin- Testing and awards for virus scanners able to detect all viruses that are currently "in the wild" AV-Test.org AV-Test.org- Tests of anti-virus software on Windows 98, ME, NT, 2000, XP, Linux, FreeBSD, Netware, Exchange, and Notes. Spychecker Spychecker- List of anti-spyware software and other privacy tools. Schrock Innovations Do-It-Yourself Guides Schrock Innovations Do-It-Yourself Guides- A visual guide database for novice users to manually remove various spyware infections from a Windows XP computer. 2 Spyware 2 Spyware- Remove spyware and adware. Manual and automatic removal of spyware and adware parasites which compromises users privacy. Databases of known spyware, suspicious file nam… Computer Associate's Security Advisor Computer Associate's Security Advisor- Offers virus and vulnerability databases, clean-up utilities, detection signatures files, and remediation instructions. SuraSoft.com SuraSoft.com- Searchable database of hundreds of software that contain spyware. Promises, Promises, Promises-A Closer Look at P3P Promises, Promises, Promises-A Closer Look at P3P- Andy Oram article discussing P3P as a social protocol, as well as his views of the motivations behind the protocol. Promise of P3P stalls as backers regroup Promise of P3P stalls as backers regroup- Six months after its recommendation as an Internet standard, a major privacy initiative is entering an awkward adolescence as software he… E-Commerce News: White House, Industry Giants Back Net Privacy Project E-Commerce News: White House, Industry Giants Back Net Privacy Project- Everything you need to know about doing business on the Internet. Information for C-Level executives and sm… Cover Pages: W3C Releases P3P 1.0 as a Recommendation. Cover Pages: W3C Releases P3P 1.0 as a Recommendation.- Cover Pages article with links to specifications, websites and tools. Analysis of P3P and US Patent 5,862,325 Analysis of P3P and US Patent 5,862,325- This Note is a response to a request from the W3C for Pennie and Edmonds' opinion as to whether implementations of the W3C's Platform for … Finally, Agreement on P3P Finally, Agreement on P3P- The World Wide Web Consortium reaches cross-industry agreement on an XML-based language for expressing Web site privacy policies. The W3C, P3P and the Intermind Patent The W3C, P3P and the Intermind Patent- XML.com article. Claims of patent infringement and the potential implications for implementors of the W3C's Platform for Privacy Preferences… Pretty Poor Privacy: An Assessment of P3P and Internet Privacy Pretty Poor Privacy: An Assessment of P3P and Internet Privacy- A critical article published by Electronic Privacy Information Center (EPIC) and Junkbusters. Anonym.to Anonym.to- Prevents a site from appearing in the server logs of referred pages as a referrer. Onion Routing Onion Routing- A product of the US Navy Research Lab, the Onion Routing is an Internet based system to prevent eavesdropping and traffic analysis attacks. It is now "off-line" but… BrowserSpy.dk BrowserSpy.dk- Free service to show web surfers how much information their browser can reveal about their system when visiting normal web pages. Spam Mimic Spam Mimic- Hides short messages in a fake spam; the recipient can decode them after receiving the real-looking "unsolicited commercial e-mail". Piriform: CCleaner Piriform: CCleaner- Freeware system optimisation and privacy tool that erases Internet history and other unused files, and cleans up orphaned registry entries. [Windows] NetworkWorld: Overview of application firewalls NetworkWorld: Overview of application firewalls- Article explaining some common port 80 attacks and the products available to combat them. Setec Investigations Setec Investigations- Providing internet security and consulting services, in addition to tools, news and related resources. Digital Defense Incorporated Digital Defense Incorporated- Network security specialists providing vulnerability assessments, penetration testing, application development and security policies. Bullzi Security Bullzi Security- Provides converged security solutions: compliance programs, information security services, physical security solutions, education programs, document security and … Parameter LLC Parameter LLC- Technical security audit firm specializing in the financial and banking industry. Located in St Peter's, Missouri. RedSphere Global Security Solutions, LLC. RedSphere Global Security Solutions, LLC.- Offers a variety of complete end-to-end solutions and services from penetration testing to tactical training. infoLock Technologies infoLock Technologies- Provides internal threat management and risk analysis services. BCV Solutions, Inc. BCV Solutions, Inc.- Provides an array of security related services as well as overall security oriented management consulting.