3 Comments on “which of the following concepts?”

1. Boris says:

   July 22, 2015 at 2:22 pm

   I think that if the sender cannot be verified, the issue is Confidentiality because we are not confident that the site is what it says it is. Data Integrity is not an issue here.

   
   
   
   0

   
   
   
   0
   1. Tony says:

      August 28, 2015 at 11:49 am

      confidentiality refers to keeping the data secret (confidential). Typically, this is done using encryption.
      integrity refers to the data being trustworthy, ensuring that it hasn’t been altered or is not spurious. Typically this is done with hashes and/or asymmetric encryption. The most common is to create a hash of the message, then encrypt this hash with your private key. This is commonly called a digital signature.

      
      
      
      0

      
      
      
      0
2. PeterPan says:

   July 26, 2015 at 9:59 am

   I think its Integrity, (you cannot trust what it said in the message.) The message could have come from someone else, or been altered.

   Assume the email did come from someone else, then they wrote the email, and confidentiality is not your issue, since its not your data.

   Now, if the email got altered along the way (thus invalidating the signature), then you can also assume a 3rd party is reading and altering your emails, thus you could assume Integrity and Confidentiality are concerns.

   
   
   
   0

   
   
   
   0