TLS/HTTPS Encryption

Per the HIPPA/HITECH act, all of our fax transmissions to our customers need to be encrypted using a cipher suite. Our security team has verified that EasyLink supports DHE-RSA-AES256-SHA, but I don't understand how to go about specifying this to the API. Could someone please point me to an example of this being done in C#?

Find more posts tagged with

Comments

api_support

The API URL for submission is https. We will receive the submission SSL encrypted. Will you clarify what you mean by the fax being encrypted?

api_support

It looks like getting transport-level encryption is not an EasyLink API-specific issue. You have already confirmed for us that your servers support at least one of the suites we require. It looks like I just need to restrict the available cipher suites that my client app allows (to those on the list I posted).

If anyone needs to restrict the cipher suites that the ssl connection uses, this kb article, http://support.microsoft.com/kb/245030/, showed that I just needed to add a DWord value named "Enabled" with a value of "0" in the [RC4 128/128] key. Our connection then defaulted to a HITEC/HIPAA compliant cipher suite.