RE: PGP encryption.

Usually this is to provide another layer of defense.

SFTP only protects while the data is being transmitted. Eavesdroppers can't get the data that's being transmitted. However, after the transfer, they're sitting on a server that's open to the internet. If that server gets compromised, then the non-encrypted files are fair game.

John Maassel
Lead Programmer/Analyst
Bob Evans Farms, Inc
john_maassel@xxxxxxxxxxxx
614-492-7413

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of rob@xxxxxxxxx
Sent: Friday, July 20, 2012 3:50 PM
To: Midrange Systems Technical Discussion
Subject: Re: PGP encryption.

Because Wells Fargo and Visa say so. It has been determined that is all I need to know.


Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com





From: John McKee <jmmckee@xxxxxxxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>,
Date: 07/20/2012 03:47 PM
Subject: Re: PGP encryption.
Sent by: midrange-l-bounces@xxxxxxxxxxxx



I know I am missing something. Why is PGP encryption needed? Using
sftp is already encrypted.

I can understand using PGP or GnuPGP if plain FTP is used.

Thanks,

John McKee

On Fri, Jul 20, 2012 at 2:35 PM, Charles Wilt <charles.wilt@xxxxxxxxx>
wrote:

9K....Yowsers!

Even more reason to use GnuPGP...

It's compatible with PGP...

On Fri, Jul 20, 2012 at 3:21 PM, Vernon Hamberg
<vhamberg@xxxxxxxxxxxxxxx> wrote:

I've heard yesterday that Symantec now owns PGP and charges for it - an
enterprise license is like $9000 - my son is working for a union here
that has a partner who wants them to use PGP, then SFTP.

So I checked with our security guru, and he says, yes, you need to pay

now.

I don't know how Linoma deals with this - whether they have some kind

of

deal with Symantec.

Our guy said that each customer is assigned a shared key by Symantec.
This has to be given to anyone who needs to decrypt the data. You'd

need

to get that shared key from whomever is sending you stuff, I believe.

That's all I know - and I also won't say how I feel about Symantec!!

HTH
Vern

On 7/20/2012 1:15 PM, Charles Wilt wrote:

Check your Linoma software...they might already have it...

Otherwise

http://www.iprodeveloper.com/article/application-development/using-gnupg-for-pgp-on-i-64370

http://www.scottklement.com/gnupg/

As far as key, they can be either or...as the receiver I'd expect the
partner to be using your public key that you'd need to provide
directly or publish.

HTH,
Charles

On Fri, Jul 20, 2012 at 1:53 PM, <rob@xxxxxxxxx> wrote:

We have a trading partner who wants to encrypt a file using PGP
encryption. Then he will send it to us via our SFTP site (set up

using

Linoma software). Once the transmission is complete we have to

decrypt

it. There's two questions that first pop to mind:
1 - Are PGP keys like SSL keys where you get them from a trusted

source

for a fee or are they something that you get from some open source

type

site for nothing?
2 - How does one decrypt a file on the i that is PGP encrypted?


Rob Berendt
--
IBM Certified System Administrator - IBM i 6.1
Group Dekko
Dept 1600
Mail to: 2505 Dekko Drive
Garrett, IN 46738
Ship to: Dock 108
6928N 400E
Kendallville, IN 46755
http://www.dekko.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)

mailing list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

________________________________

Notice from Bob Evans Farms, Inc: This e-mail message, including any attachments, may contain confidential information that is intended only for the person or entity to which it is addressed. Any unauthorized review, use, disclosure or distribution is strictly prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message and any attachments.