RE: RPC over HTTP security

["Price, Robert H" <rhpric () sandia gov>]

Using the ISA Server setup an Secure mail.domain.com and a
SMTPS.domain.com and issue certificates, if configured correctly the
users can even setup a imap client not on your network and use the SMTPS
for relaying messages. 

-----Original Message-----
From: LordInfidel () directionweb com [mailto:LordInfidel () directionweb com]

Sent: Thursday, January 27, 2005 9:33 AM
To: sf_mail_sbm () yahoo com; security-basics () securityfocus com
Subject: RE: RPC over HTTP security

http://office.microsoft.com/en-us/assistance/HA011402731033.aspx

~tips~
Make sure you use it over https and not http. (use self signed CA certs)
The client side needs to be outlook 2003, previous versions will not
work.

-----Original Message-----
From: sf_mail_sbm () yahoo com [mailto:sf_mail_sbm () yahoo com]
Sent: Wednesday, January 26, 2005 8:03 AM
To: security-basics () securityfocus com
Subject: RPC over HTTP security



Hi List,
We are thinking about deploying RPC over HTTP to access email from the
Internet

Wanted to get some information on the technology and the security
implications of same

Not much info from Microsoft's site

any help would be greatly apreciated

Thanks,
Ronish