A banker is required to send sensitive information to his clients over Internet. What do you think is the best practice?

	Confidentiality here is more important than integrity. He should only encrypt the message.
	Integrity protection can be used alone here to defend against both passive and active attacker
	Both integrity and confidentiality should be achieved to protect the information of clients
	He only needs to protect the integrity of the information against the active attackers who is able to alter the message