Secure Delivery of Zip files

raj_mainframe08 · New User Joined: 11 Sep 2007 Posts: 65 Location: Gurgaon

I need to send an ZIP file email attachement. I know how to zip a file and how to email through JCL but is there any way such that I can use the Secure delivery feature of Outlook?

superk · Posted: Tue Dec 15, 2009 4:34 pm

I'm sure the answer lies within Outlook.

raj_mainframe08 · New User Joined: 11 Sep 2007 Posts: 65 Location: Gurgaon

What i am asking is is there any way such that I can use the Secure delivery feature of Outlook through JCL while sending the attachment? Appreciate if somebody knows the answer. Thanks

enrico-sorichetti · Posted: Tue Dec 15, 2009 4:49 pm

Robert Sample · Posted: Tue Dec 15, 2009 4:59 pm

Google is your friend. Look at RFC 2821 and RFC 2822, which are the standards for emails. If there is no mention of your desired feature in these documents, what you want to do almost certainly cannot be done from the mainframe directly.

The way to ensure security on email is to encrypt the message (using any of the various methods available), then email it as an attachment to a message.

PeterHolland · Posted: Tue Dec 15, 2009 5:12 pm

Maybe password protecting th zip file is a solution?

Robert Sample · Posted: Tue Dec 15, 2009 5:21 pm

Password protection of a zip file doesn't add much security -- as shown by Googling "zip password recovery" and finding there's 11 million hits. If the o/p requirement comes from PCI or something similar, zip passwords do not meet the requirement.

raj_mainframe08 · New User Joined: 11 Sep 2007 Posts: 65 Location: Gurgaon

Well i am trying for the ZIP password protection but the report i am getting is not password protectec. Please advice if i am doing somethig wrong. Following is the code

PeterHolland · Posted: Tue Dec 15, 2009 5:40 pm

enrico-sorichetti · Posted: Tue Dec 15, 2009 5:45 pm

PeterHolland · Posted: Tue Dec 15, 2009 5:57 pm

Hello Enrico,

i know all that stuff (using quotes and all). I was just wondering in what way Robert got 11.000.000 hits.

PeterHolland · Posted: Tue Dec 15, 2009 6:01 pm

raj_mainframe08

Was the following dataset created with a password?

SS5482.G5482.PA01F.ZIP.DATA

Beside that i dont know if ZIPPASS RAJIV has anything to do with
%XMITIP or the zip process.

And btw thanks for the password, going to use that when im listening in your transmission.

raj_mainframe08 · New User Joined: 11 Sep 2007 Posts: 65 Location: Gurgaon

No. The dataset SS5482.G5482.PA01F.ZIP.DATA is a excel report in zip format. When we send this dataset using XMITIP, it the go as a zip file in which excel report is there.

ZIPPASS RAJIV

is a command where i want to apply password RAJIV to the zip file. But the file i am getting in email is getting opened without using any password

enrico-sorichetti · Posted: Tue Dec 15, 2009 6:11 pm

Hi Peter!
sorry for my bad judgement,
I got around 11,000,000 hits too

the difference about choosing only english pages rather than default to all languages is irrelevant

PeterHolland · Posted: Tue Dec 15, 2009 6:15 pm

raj_mainframe08 · New User Joined: 11 Sep 2007 Posts: 65 Location: Gurgaon

Following is the code i am using to create the zip file. Please let me know how can i apply password then

PeterHolland · Posted: Tue Dec 15, 2009 6:25 pm

–PASSWORD(<userpw>)

see : www.pkware.com/documents/manuals/PKMU-V5R5000.pdf

enrico-sorichetti · Posted: Tue Dec 15, 2009 6:26 pm

I strongly recommend that sensitive matters like encryption should not rely on forum replies

they should be discussed with the proper organization hierarchy in order to apply the correct process

PeterHolland · Posted: Tue Dec 15, 2009 6:32 pm

Why is that Enrico? A lot of stuff is to be found about en/decryption on the internets and/or literature.
Asking for some solutions/procedures etc. is not that bad.
Implementing some things is another story, that would be left to
authorized people. But maybe the TS belongs to that.

raj_mainframe08 · New User Joined: 11 Sep 2007 Posts: 65 Location: Gurgaon

i am just trying to understand how can i create the password protected zip file and not giving the actual data. Whats the problem in that if i am not sharing any sensitve information?

PeterHolland · Posted: Tue Dec 15, 2009 6:43 pm

enrico-sorichetti · Posted: Tue Dec 15, 2009 6:45 pm

the main point I try to make is that people asking on forums just want a quick and dirty recipe for blind problem solving

I strongly believe that the main concern when replying to any question should be
on teaching people how to use the proper organization channels and apply the proper standards and practices

for example
what is the security level of the data being exchanged
who is responsible for the data
how are the passwords going to be exchanged
what is being done to secure the overall path of critical data

that' s why without knowing the whole shebang I advice against giving advice
the tools should have been already chosen and tested befor beyng deployed to the bottom of the chain
( if somebody is higher in the chain then he should not have the need to ask on a forum)
the command how to password protect a zip file should be the last concern

that' why I feel that security related issues should not be discussed on forums

giving a quick and dirty suggestion might agree with the spoon feeding approach , but in the long run will make people lose the organizational perspective

also one more note... people asking on the forums very seldom have the need to know

raj_mainframe08 · New User Joined: 11 Sep 2007 Posts: 65 Location: Gurgaon

Hi Peter,

Yes, i have tried your suggestion for creating the password protected zip file and successful in doinjg that. Really appreciate your help in this regard. Thanks [:d]