Re: EDI and Encryption Issues

[Dave Darnell <dave_d@xxxxxxxxxxxxx>]

At 08:26 AM 4/12/96 +0100, Rik Drummond wrote:
>If we have to select an existing encryption/protection architecture for
EDI-over-Internet, are there preferences?
>
>Which  does the group think is the best for EDI-over-Internet? What are the
alternatives?:
>        - S/MIME
>        - MOSS
>        - PGP with additions
>        - Other

I lean toward PGP --- mainly because it is so ubiquitous on the net and has
plenty of fans.  You can even buy 5 or 6 books on it  in Borders Book Store.
I bought my share last year and have been using it ever since.  The
signature certification part is worthless to me, but that is just my
opinion.  I really do not think CA infrastructure is important in the
immediate future but is EXTREMELY important if we expect EDI to really be
successful in the 6 million plus small business market.  Of course we will
need some real changes in traditional EDI to make this happen -- like
new-EDI (Ken Steel) taking off.
But that is another thread -- and mailing list.  

I demo-ed PGP encrypted EDI with MS Exchange at my DISA session and someone
asked me why I did not use X12.58.  Does anyone know of any products that
implement X12.58 for TCP/IP SMTP/MIME ?  I sure don't.

S/MIME sounds really promising -- anyone know of an e-mail vendor that has
it yet? 

I know MOSS is available at TIS for download but have not had the opportunity
to evaluate it.

>
>Do some of offer the ability to support world wide EDI exchanges better
than others?
>
>Do some facilitate a better exchange with the X.435 standards than others?
Do we care?
>

I do not see X.435 as being a factor on the Internet -- if anyone has a
different view then I would like to see details.

>Do any allow us to conduct EDI easier without the need for an  _initial_
CA (certification authority) hierarchy?
>

I think PGP works great if you ignore the "chain of trust" digital signature
certification stuff.

>What are your thoughts?
>
>Later...Rik
>
>
>
>
======================================
|   David Darnell              
|   SysTrends, Inc.             
|   Arizona EC/EDI Roundtable   
|   1850 East Carver Road       
|   Tempe, AZ 85284             
|   Tel (602)838-5316           
|   Fax (602)897-8032           
|   mailto://dave_d@systrends.com        
======================================