Re: encrypted source file support in jdk?


physical security is another issue, which will have to be dealt with as well. But of course there is a limit to that as well.

I am more concerned with electronic security, because thats where the biggest threat is. employees can be handled with encrypted files because if done right, they can not do anything with it themselves either. See my other post from a few minutes ago for a more detailed explanation fof the scenario I have in mind.


regards

tom
rossum wrote:
On Fri, 28 Sep 2007 08:42:41 +0200, tom forsmo <spam@xxxxxxxxxx>
wrote:

rossum wrote:
On Thu, 27 Sep 2007 14:17:55 +0200, Tom Forsmo <tom@xxxxxxxxxx> wrote:

Encryption is a solution to a problem. Since I am not clear what your
roblen is then is is difficult for me to suggest a solution, or even
if encryption is the right solutin to your problem.

You want to protect your source files. Why? Do you have some
super-secret algorithm in your program that a competitor wants to get
their hands on?
Sorry to have to say this, but why is none of your business.
Every company has its intelectual property it wants to protect, if not then lets just open all gateways and firewalls. That does not seem right does it?
Try a little more open minded thinking next time you ask questions, dont just assume the person you are talking to is asswipe.


I am asking questions because I can help you better if I have more
information. My apologies if my questions were poorly phrased.

As an example, you could install 10m concrete walls, razor wire and
have all people entering or leaving subjected to a full body search.
Alternatively you could have a notice on the door saying "It is a
sacking offence to enter this room without permission". And there are
a lot of intermediate positions as well. Without more background
knowledge I am not in a position to be able to know which is the more
relevant suggestion.

Encryption is a solution to some, not all, security problems. Without
knowing more about your problem I cannot tell if encryption is the
correct solution. For instance, would you require TEMPEST (=Emsec)
sheilding? Encryption is no good if your attacker can read your
screens from a van parked across the road.

What about the vetting of the overnight office cleaning staff - they
are often the easiest way to gain entry to otherwise closed offices.
There is far more to security than just encryption.
.

Relevant Pages

  • CryptoSurvey -- Results ..
    ... Many same or similar behavioral barriers for the ... effective utilization of many security solutions still exist limiting ... applications of encryption technologies currently in commercial ... Many people do not care about cryptography and/or security products ...
    (sci.crypt)
  • CryptoSurvey -- Results ..
    ... Many same or similar behavioral barriers for the ... effective utilization of many security solutions still exist limiting ... applications of encryption technologies currently in commercial ... Many people do not care about cryptography and/or security products ...
    (sci.crypt)
  • Re: OT - Kuwait
    ... > One place where I agree with you is that the scope of government intrusion ... > into the private matters of Americans is much greater than most Americans ... >>> strict security procedures to prevent unauthorized release of the keys. ... >> Feds Want to Control Encryption ...
    (alt.sports.football.pro.ne-patriots)
  • Re: OT - Kuwait
    ... Making the case for encryption standards that would allow the Feds to ... One place where I agree with you is that the scope of government intrusion ... into the private matters of Americans is much greater than most Americans ... >> strict security procedures to prevent unauthorized release of the keys. ...
    (alt.sports.football.pro.ne-patriots)
  • Re: National Security Backdoor in telnetd - all versions.
    ... >>against the Secret Service for their violations of civil rights. ... encryption techniques to protect critical resources. ... plants have absolutely horrid security resulting from these stupidities. ... Of course I doubt you have an NDA with the government - so ...
    (comp.os.linux.security)