[145626] in North American Network Operators' Group
RE: [outages] News item: Blackberry services down worldwide
daemon@ATHENA.MIT.EDU (Jamie Bowden)
Thu Oct 13 11:57:45 2011
Date: Thu, 13 Oct 2011 11:55:49 -0400
In-Reply-To: <CAL9jLaagKv-w3KmbeW9ZdD+ZK0CXA5FQDmTXR+t0oF5va5imyA@mail.gmail.com>
From: "Jamie Bowden" <jamie@photon.com>
To: "Christopher Morrow" <morrowc.lists@gmail.com>,
"Jay Ashworth" <jra@baylink.com>
Cc: NANOG <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
> -----Original Message-----
> From: Christopher Morrow [mailto:morrowc.lists@gmail.com]
> Sent: Thursday, October 13, 2011 11:36 AM
> To: Jay Ashworth
> Cc: NANOG
> Subject: Re: [outages] News item: Blackberry services down worldwide
>=20
> On Thu, Oct 13, 2011 at 11:13 AM, Jay Ashworth <jra@baylink.com>
wrote:
> > ----- Original Message -----
> >> From: "Jamie Bowden" <jamie@photon.com>
> >
> >> Someday either Google or Apple will get
> >> off their rear ends and roll out an end to end encrypted service
> that
> >> plugs into corporate email/calendar/workgroup services and we can
> all
> >> gladly toss these horrid little devices in the recycle bins where
> they
> >> belong.
> >
> > <plug>I'm fairly sure K-9 does GPG, at least for the email</plug>
>=20
> plus normal mail + k9 will do TLS on SMTP and IMAP... or they both do
> with my mail server just fine. (idevices seeem to also do this well
> enough)
>=20
> It's possible that the 'encryption' comment from Jamie is really about
> encrypting the actual device... which I believe Android[0] will do, I
> don't know if idevices do though.
As of 2.3[.x?] (can't remember if it's a sub release that intro'd this),
Android devices can be wholly encrypted, though I don't know if they are
by default. All these kludges are great on a small scale, but the BES
does end to end encryption for transmission, plugs into Exchange, Lotus,
Sametime, proxies internal http[s], and lets us manage policies and push
out software updates from a central management point. When it works,
it's also scalable, which matters when you have thousands of devices to
manage.
Jamie