If the subject makes no sense to you, that's fine, it makes no sense to me.
I've been tasked with securing emails sent from some devices, and I'm looking for advice on intelligent questions to ask to clarify some requirements. Apparently the source and destination ip addresses need to be encrypted, along with the username used to log in, and the email message itself.
In order to encrypt the source and destination IP addresses of a conversation, it looks like I'd need to use something like IPSec, correct? And that would be done at the OS level, not just as part of an application when sending an email, correct?
For encrypting the username, I have no clue what that means. Seems like if I encrypt the credentials when attempting to log in, I won't be able to log in unless the server can decrypt them somehow.
For encrypting the email itself, if I use something like PGP, I would need to set up keys on the device sending the email, and the receiver's machine, correct?
I've done some research on the requirements, and the above is what I've come up with. Looking for some intelligent questions to ask, and validation of my assumptions above.
thanks,
Mark