Why ECIES Encryption Trumps HTTPS
December 4, 2017
When it comes to end-to-end encryption, HTTPS is not enough keep data secure. Unfortunately, HTTPS has many limitations and hackers are increasingly imitating the distinct padlock symbol to make fraudulent sites appear secure. This common HTTPS scam fools users into believing that a website is safe so that they will enter personal data or credit card information.
Another major flaw with HTTPS is that it fails to encrypt data at rest, which puts endpoint security at risk. Although it may seem as if your data is secure with HTTPS, you must be aware that it is not fully encrypted.
To guarantee secure data transfer at each endpoint of transmission, it is vital to utilize well-defined end-to-end fax encryption methods such as those defined in the Elliptic Curve Integrated Encryption Scheme (ECIES).
Now available from etherFAX, SENx uses ECIES encryption to securely transfer sensitive information between two endpoints. The hybrid encryption scheme, ECIES, uses Elliptic Curve Cryptography to generate a shared secret between peers to seed the encryption process with unique keying material. To further protect information, signing and authentication mechanisms assure the validity of the data in transit.
As Isaac Potoczny-Jones recently stated in SC Magazine, “End-to-end encryption essentially encrypts the data at the point of creation and only decrypts it at the point of use. It is called “end-to-end” because the data is not decrypted and re-encrypted at intermediate points (nor does it rely on a secure transport such as HTTPS. This data-centric approach is vastly more secure as you are in cryptographic control of the data at all times.”
Since information is never decrypted and re-encrypted, even if a third-party were to snoop on the information in transit – it would be indecipherable. Most importantly, end-to-end encryption schemes allow secure transmissions even over unsecured channels.
If you are looking for a 100 percent end-to-end encrypted document delivery service or secure virtual fax board, look no further. For healthcare, finance, legal and enterprise organizations that need to send high-resolution, 600dpi color documents fast and securely – SENx is the answer.
To learn more about SENx encryption APIs or a secure fax device for virtual servers, contact us today.