Encryption

[chrys7]

I have a few users bugging the heck out of me to allow them to sync their Droid devices to our Exchange Server. They keep telling me that
Android 2.3 does support Exchange Encryption. SO I brought this to the attn of my IT Director and he simply said get me proof. I cannot find either on the Android forums or any other site that says 2.3 officially supports Exchange encrytion. Does anyone have any links that clearly state that version 2.3 or 2.3.3 do support it?

 

[JerryScript]

At this time, hardware encryption is not implemented in 2.3. There may be support for it in the kernel, but there is always the ADB root problem.

You can hook up pretty much any Android phone to your computer and use the Android SDK's tools to access any part of the filesystem you want (on some phones you need 3rd party software too). This means you can alter environment variables, access files and data directly, and change any part of the system you wish. Someone with a stolen/found phone and malicious intent could easily install a different kernel or flash various parts of the system so as to decrypt and dump the entire contents of the phone.

So with the current framework and supporting dev tools, and the fact that security depends upon physical possesion of the phone, Android is not Exchange secure.

 

[ma75@tmw.com]

Will the android ever have the encryption? They took my Aria away, (whimper),,,