Snapchat Employee Data Leaks Out Following Phishing Attack

Re:Snapchat Employee Data Leaks Out Following Phishing Attack by tomjen3 on Tuesday March 01, 2016 @12:27AM (#11200944)

Adopt PGP signatures as a requirement on emails that include sensitive data. It should be easy enough to have an internal key server and a company key that counter signs all valid company keys. Require the key only be used for signing and kept on a usb stick.

[ Parent | on HN ]

Re:Snapchat Employee Data Leaks Out Following Phishing Attack by rkeene2 on Tuesday March 01, 2016 @12:38AM (#11200971)

S/MIME and X.509 is a lot more common than PGP signatures -- support for it is built in to most MUAs. Also, typically the keys are on smartcards rather than USB devices where the private key could be accessed.

[ Parent | on HN ]

Re:Snapchat Employee Data Leaks Out Following Phishing Attack by cyphar on Tuesday March 01, 2016 @03:13AM (#11201391)

Or just buy everyone in your company a yubikey that is already set up and ready to go?

[ Parent | on HN ]