" Pgp | LuxSci FYI pgp « LuxSci FYI
Secure Email, Web and Form Solutions     +1 800.441.6612
LuxSciLuxSci
Secure Email,
Web and Form Solutions
Call: 800-441-6612
Int'l: +1 814-870-9250
sales@luxsci.com
support@luxsci.com

Posts Tagged ‘pgp’

Mobile Site Access to Encrypted Blogs and Files

Friday, April 6th, 2012

LuxSci’s Blog and File/Document WebAides have a great feature to optionally encrypt individual entries:

  • The File and Blog entry data is PGP-encrypted “at rest” (while stored on the servers).
  • Only your specified recipients (users or groups of users) can decrypt the data (even LuxSci staff cannot decrypt the data unless you give us your passwords).
  • Ideal for HIPAA or the storage of other very sensitive data.

While encrypted entries have been available for many years, access to the encrypted data via LuxSci’s Mobile Site is new.  Users can now login from their mobile device to our fast and slick mobile portal and unlock this data, view the secure content, and download decrypted files.

You no longer have to be separated from your sensitive data, just because all you have on you is your phone!

The Mobile Site will soon be expanded to enable editing and creation of new secure entries as well.

Automate Secure Outbound Email Sending with SecureLine

Monday, September 26th, 2011

Frequently we are approached by customers who have automated systems that need to send out secured emails on demand and without any manual interaction.  These could be web site response systems for sensitive information, health care labs emailing results which need to meet HIPAA compliance, or other situations where the email messages must all be secured.

LuxSci’s SecureLine service provides a means for encrypting some or all outbound email messages using any combination of 4 different email encryption techologies: SMTP TLS, PGP, S/MIME, and SecureLine Escrow (secure message pickup).

Read the rest of this post »

Collaborative Access to Encrypted Archived Form Data with SecureForm

Monday, August 15th, 2011

LuxSci SecureForm service uniquely enables web sites and PDF forms to post their data and files to a secure URL and have that data automatically securely emailed to one or more recipients, uploaded to an S/FTP site, archived in an online collaborative WebAides file storage space, and/or saved to a MySQL database.  With a few clicks and minimal changes to existing forms, customers can have sophisticated and secure forwarding, processing, and storage of their form posts, including re-filling the posted data into template PDF, html, xml, and other files.

Collaborative Access to Encrypted Archived Form Data

When using SecureForm to store copies of uploaded form data to an online Documents WebAide, you can choose to have that data automatically encrypted so that only the “recipient” of the encryption (i.e. one of your users) can ever open it.  Not even LuxSci’s technical support staff would be able to access this data unless you specifically allowed it.  

Read the rest of this post »

Digital Signatures in Email

Tuesday, May 24th, 2011

Many of our customers require that electronic digital signatures be added to outbound email messages.  Here we discuss what these are, what they do for you, and how to add them using LuxSci SecureLine email encryption.

What are Digital Signatures?

In short, adding a digital signature to an email message allows:

Read the rest of this post »

SecureForm: now with SMTP TLS for Secure Form Email Delivery

Friday, April 2nd, 2010

SecureForm is LuxSci’s service that makes it quick and easy to collect data, including files, from web and PDF form posts and have that data emailed to one or more recipients and/or archived in a LuxSci WebAides document storage area.  The “Secure” in SecureForm refers in part to the fact that the emailed form data can be secured using PGP or S/MIME.  This, combined with enforced use of SSL, ensures that the form data is secured from end-to-end … from submission by the end user to the receipt by the web site administrator.  This ensures HIPAA compliance and strong security for that data.

Now, SecureForm supports the option of secure delivery of form data emails to recipients using TLS instead of PGP or S/MIME.  While use of TLS only is less secure than PGP or S/MIME, it is more user friendly — there is no need for certificates or extra steps to decrypt the messages once they arrive.  TLS does provide transport encryption from LuxSci’s servers to the recipients servers and thus still provides HIPAA compliant form data delivery. 

Read the rest of this post »

Secure Web Pages and Web Forms: What You Need to Know

Tuesday, January 5th, 2010

Creating a web site that has “secure” components requires more than slapping together some web pages and adding an SSL Certificate.  All a certificate really does is create a thin veneer of security — one that does not go very far to protect whatever sensitive data necessitated security in the first place.  In fact, naive attempts at security can ultimately make the data less secure and more likely to be compromised by creating an appetizing target for the unscrupulous.

So, beyond paying big bucks to hire a developer with significant security expertise, what do you do? Start with this article — its purpose is to shed light on many of the most significant factors in secure web site programming/design and what you can do to address them.  At a minimum, reading this article will help you to intelligently discuss your web site security with the developers that you ultimately hire.

Read the rest of this post »

Can You Make Your Email More Secure?

Wednesday, August 26th, 2009

LuxSci offers many options for email security. Whether it is PGP, S/MIME, LuxSci’s SecureLine end-to-end email encryption, or forced secure logins over SSL, LuxSci can guide you in making the best choices for secure and safe email.

End-to-end email encryption is one way to ensure that your email can only be read by the intended recipients. SSL and TLS connections are secure, but only to a point. While you can ensure that your users connect securely to LuxSci’s servers, who is to say that your recipient’s connection is secure? With LuxSci SecureLine, even if the recipient’s connection isn’t secure, you can be assured that your message is sent securely and can only be read by whom you intended.

Read the rest of this post »

PGP Encryption

Thursday, August 6th, 2009

PGP Encryption LogoWhile most people might not know what PGP encryption is, almost everyone with access to an email account uses it regularly. It’s one of the most popular ways to digitally sign, encrypt or decrypt emailed documents, adding an additional level of security of email communications. But what might sound like a fairly dry and mundane tool has a history fraught with intrigue, peril, spy agencies and very real threats to the creator, a computer scientist named Phil Zimmerman.

Read the rest of this post »

How to Install S/MIME (and PGP) Encryption Certificates into Major Email Clients

Wednesday, May 27th, 2009

We at LuxSci are always being asked questions about various email programs and their usage.  With HIPAA compliance becoming more and more important, we get a lot of inquiries regarding secure email. One of the most frequently asked questions is how to install S/MIME security certificates in various email programs that our servers support. Sometimes finding instructions on installing security certificates in various email clients is difficult, even with the help of search engines. To make your search easier, we have complied instructions for several of the the major email clients:

  • S/MIME for Outlook 2003
  • S/MIME for Outlook 2007
  • S/MIME for Mail.app
  • S/MIME for Entourage
  • S/MIME for Thunderbird
  • PGP for Thunderbird via the Enigmail Add-on.

Read the rest of this post »

Recipe: Completely Secure Collection of Web Form Data using SSL and PGP or S/MIME

Tuesday, March 17th, 2009

The situation: your organization needs to collect information from clients through from(s) on your web site, but that information is sensitive. So, you need to be absolutely sure that the information is transferred from the users of your web site to you in as secure a fashion as possible. This means that

  1. no one but you (or optionally your authorized staff) can intercept or read the information,
  2. the information is never stored insecurely anywhere
  3. the information cannot be modified without your knowledge

Why would this high level of security and privacy be necessary? There are many cases where they are essential; some of these include:

Read the rest of this post »

Security Certifications TRUSTe EU Safe Harbor Thawte Extended Validation SSL Certificate McAfee Secure Authorize.net Merchant