The Building Blocks for Trusted Internet Services

Transcription

1 The Building Blocks for Trusted Internet Services Openness, Privacy and Security Neil Cook, Bert Hubert Open-Xchange March 15, 2016

2 Open-Xchange: Who are we? Trusted and integrated solutions OX App Suite communication and collaboration suite: Engage more customers. OX-as-a-Service secure, hosted stack from App Suite through to secure storage: Cloud GTM M sold seats 22 countries 17 languages Trusted Services 3.5M mail Server installations globally 68% worldwide market share Superior scalability & cost efficiency Full control back to Service Provider Fully secure (MAAWG / secure standard) Storage backend agnostic (S3, object storage) EU market leader Domain Name Services (50%) Leading DNSSEC >75% of hosted domains Excellent scalability Database backed Error checking API Millions of domains/server 2 Trusted Internet Services Building Blocks

3 The Battle for End-Users: Previously Great Features US-based Free OK Features Based anywhere Free/Subscription Open-Source 3

4 The Battle for End-Users: Now Great Features US-based Free Great Features Based anywhere Free/Subscription 4

5 The Next Battleground: Trust Mass Surveillance Hackers and Foreign Governments Hosters and Service Providers targeted 5 Trusted Internet Services Building Blocks

6 How can I trust you? Why should I trust you? Don t be Evil Do I rely on your word? At Apple, your trust means everything to us. 6 Trusted Internet Services Building Blocks

7 Open Source == Trust Open Source Software means transparency OSS means Open- Standards Trust the Openness not the company 7 Trusted Internet Services Building Blocks

8 Proprietary means Lock-In Hard to migrate your own data Migrate Data Other Cloud Service My Data Proprietary Cloud Service In-House Data-Centre or Software 8 Trusted Internet Services Building Blocks

9 Open Source means Flexibility Freedom to choose the right business model Run & Host for others Run & Host Yourself Use 3 rd party service open standards 9 Trusted Internet Services Building Blocks

10 Security also a new Battleground Security is an important building block of trust If I don t feel secure, how can I trust your services? Internet security standards make the internet safer Internet security standards make your users safer

11 But Google is going big on Security!

12 Anything they do you should do better DNSSEC DANE OpenPGP/TES

13 13 Trusted Internet Services Building Blocks

14 But DNSSEC is Hard isn t it? % pdnsutil secure-zone mydomain.com 14 Trusted Internet Services Building Blocks

15 DANE Securely Authenticate TLS Certs in DNS Removes reliance on CAs Even allows self-signed Certs Provides real security for any services with optional TLS (STARTTLS) Prevents MITM Attacks Prevents DNS Spoofing Builds on DNSSEC Way more secure Google s Red Padlock Join Trusted Services Initiative (TES) for more EHLO foobar.com EHLO foobar.com Sending MTA 250 example.net CLEARTEXT MITM 250 STARTTLS CLEARTEXT Receiving MTA 15 Trusted Internet Services Building Blocks

16 OpenPGP and HKP: Real E2E Encryption I d like to send an encrypted message to neil@example.com Mail Client (WebMail, App, MTA) Query: SRV _hkp._tcp.example.com? Answer: hkp.example.com:11371 DNS HKP Server for example.com 16 Trusted Internet Services Building Blocks

17 17 Trusted Internet Services Building Blocks

18 How do you compete with Free? 21 st Century Business Model: We give you service, you give us your privacy

19 Difficult for Free to tailor their services Higher Security Regulatory Requirements Stricter Privacy Locality Encryption Special-Needs Customer Service

20 People will pay for differentiated services No need to compromise privacy Can develop relationship with customer Can tailor service to customer requirements Open and Honest Contract leads to Trust

21 Internet Services Building Blocks Trusted Internet Service Tailored and Differentiated Privacy & Security Open Source & Open Standards Features 21 Trusted Internet Services Building Blocks

22 Join us tomorrow at 2pm for a Roundtable Discussion on Trusted Services