Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security CISSP-Discussion
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: [CISSP-D] "IT Security Project Management", Susan Snedaker

from [penngwyn] Network Security [Permanent Link]
Subject: Re: [CISSP-D] "IT Security Project Management", Susan Snedaker
Date: Tue, 22 Aug 2006 15:35:32 -0700 
On 21 Aug 2006 at 19:09, Stanley Lim wrote:


Can someone help to explain the difference between link encryption, 
end to end encryption, and s/MIME?
What is the effect if only the data is encrypted and not the header 
and routing infor.

I am taking the CISSP exam the first time, any advise?

Regards
Stanley


  In end-to-end encryption, the data is encrypted at the source and 
decrypted at the destination; it remains encrypted over the entire 
path.  This term doesn't tell us anything about *what* is encrypted.
Generally, routing information can't be; headers and metadata might 
or might not be.

  In link encryption, the whole exchange is encrypted over a single 
"hop" within the path; since this is only a single hop, it is 
possible for the encryption to include overall routing data since the 
receiving end of the link will decrypt it.  (This is kind of the 
inverse of a VPN tunnel, where a multiple-link path is seen by the 
endpoints as a single "hop".)

  s/MIME is a particular protocol for encrypting and structuring data 
payloads.  Since it applies only within the payload, it is typically 
used end-to-end and virtually never for a single hop.  But it's not 
the only way to implement end-to-end encryption.

PennGwyn







 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/CISSP-Discuss/

<*> To unsubscribe from this group, send an email to:
    CISSP-Discuss-unsubscribe@yahoogroups.com

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/
[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  Re: [CISSP-D] "IT Security Project Management", Susan Snedaker, Richard Thomas
Next by Date:  [CISSP-D] is shon harris cbt worth the price., leoindoha
Previous by Thread:  Re: [CISSP-D] "IT Security Project Management", Susan Snedaker, Richard Thomas
Next by Thread:  [CISSP-D] information, Bal Reddy
Indexes:  [Date] [Thread] [Top] [All Lists]