gnupg in larger scale for our OU

[Thomas Widhalm]

Hi!

I just got in charge of some of the Linux- und Unix- Servers at the
University of Salzburg. One of my tasks is to generate a possibility for
our organizational unit to communicate safely via Email and store data
encrypted. For some reasons I thought of implenting this on base of
gnupg. 

Maybe you can help me with some ideas. I'm searching the web and I'm
writing to others as well, but since this is a big task, I want as many
opinions as I can get:

I need plugins for many different clients. Unfortunately most of the
users have MS Outlook for their primary Mail Client, so I need a plugin
which does well with it and isn't too complicated to use. Although we
are the IT department, we have many administrative employees who are not
all too willing to dive into some "techie mumbo jumbo". Do you have any
suggestions?

I think, it would be a could idea to create our own CA. Maybe you have
some experiences to share? How many people should have access to the CAs
passphrase and secret key, what if one of them leaves us, what if an
employee with a signed key leaves, etc.

Maybe it would even be an option to create an own keyserver. Is this
useful or would it be far too overpowered?

Thanks a lot,
Regards,
Thomas
-- 
*****************************************************************
* Thomas Widhalm                             Unix Administrator *
* University of Salzburg                      IT Services (ITS) *
* Systems Management                               Unix Systems *
* Hellbrunnerstr. 34                     5020 Salzburg, Austria *
* widhalmt at unix.sbg.ac.at                     +43/662/8044-6774 *
* gpg: 6265BAE6                                                 *
* http://www.sbg.ac.at/zid/organisation/mitarbeiter/widhalm.htm *
*****************************************************************
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 185 bytes
Desc: Dies ist ein digital signierter Nachrichtenteil
Url : /pipermail/attachments/20051221/53bc1614/attachment.pgp