Read also: gateway for hackers
The social networking site for professionals launched its new Intro service Wednesday. The service is tied into Apple’s pre-installed e-mail application, which is intended to reconfigure a user e-mail to proxy via LinkedIn servers. All messages sent through the user’s e-mail will pass through LinkedIn.
Shortly after its launch, the new service received criticisms from various security groups. LinkedIn senior manager for Information Security Cory Scott wrote a blog in defense of the Intro. He provided more details and responded to the “inaccuracies and misperceptions” thrown on the new service.
“I understand that healthy skepticism and speculation towards worst-case scenarios are an important part of the security discipline; however, we felt, in this case, it was necessary to correct the misperceptions,” Scott wrote.
Scott said the company prepared very well before launching the service as they were aware of the security concerns that users ask. They have created the most secured implementation by studying the possible threats that may arise and created fixes for those scenarios.
LinkedIn involved iSEC Partners, a proven full-service security firm that provides penetration testing, secure systems development, security education and software design verification, in developing the security implementation of Intro.
Furthermore, the security team used SSL (secure sockets layer) and TLS (transport layer security) technologies to better manage the e-mail transition between the company server and the proxy servers. It also ensures that once the e-mail is delivered to the address, the system will automatically delete any traces of it on the server to prevent other parties from reading or retrieving it.
Scott encouraged users to read the Pledge of Privacy and LinkedIn Privacy Policy for more details.
