Security Basics mailing list archives
RE: Using Web mail (hotmail, gmail, yahoo, etc) for Business mails
From: "Laundrup, Jens" <Jens.Laundrup () METROKC GOV>
Date: Tue, 17 Oct 2006 12:58:22 -0700
There are legal and regulatory issues that you would have to watch out for since there are strict records keeping requirements and audit requirements that you have to meet (the fines can be very big for SEC violations) I would strongly recommend against it. I would go as far as suggesting that those mail services should be blocked to ensure that all corporate mail is restricted to the corporate network. Also, you must keep in mind that as the employer, you can be held liable for people who receive "offensive" mail that others see. In a corporate network, you can state that all e-mail is subject to monitoring whereas if the employees use their personal mail at work, you have no audit trail and as such a simple claim (one persons word against another persons word) can land you in some expensive and very hot water. All in all; bad idea! Jens -----Original Message----- From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of Steven Meyer Sent: Monday, October 16, 2006 2:39 PM To: sfmailsbm () gmail com Cc: security-basics () securityfocus com Subject: Re: Using Web mail (hotmail, gmail, yahoo, etc) for Business mails hi, as fare as I know all of the famous webmail (gmail, yahoo hotmail etc) are quite secured (https connections, time out, fishing warnings, brutforce proof etc.) and have regular backups to avoid data lost. but if you are paranoiac and you want a really good privacy and secured webmail I would advise you to use www.hushmail.com . It is very secured all the data is secured on the server. When you enter your passphrase, it is decrypted locally with a Java applet on your computer so all the data send is secured. it is fully compatible with PGP. the best is you can open a account for free. hope it helps. Steven 16 Oct 2006 06:00:16 -0000, sfmailsbm () gmail com <sfmailsbm () gmail com>:
Dear List, It is a common practice among users to user their personal email
accounts like hotmail, gmail, etc to send & receive business (and most probably confidential) information
This is particularly the case when users are out of office These webmails are not under the company's control, and hence there is
a risk of information loss. However upto now we have not heard of any such cases
Wanted to get the opinion of the list on the security risks of the use
of Webmails for business mails
Thanks & regards
------------------------------------------------------------------------ ---
This list is sponsored by: Norwich University EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The NSA has designated Norwich University a center of Academic
Excellence
in Information Security. Our program offers unparalleled Infosec
management
education and the case study affords you unmatched consulting
experience.
Using interactive e-Learning technology, you can earn this esteemed
degree,
without disrupting your career or home life. http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------ ---
------------------------------------------------------------------------ --- This list is sponsored by: Norwich University EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life. http://www.msia.norwich.edu/secfocus ------------------------------------------------------------------------ --- --------------------------------------------------------------------------- This list is sponsored by: Norwich University EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life. http://www.msia.norwich.edu/secfocus ---------------------------------------------------------------------------
Current thread:
- RE: Using Web mail (hotmail, gmail, yahoo, etc) for Business mails, (continued)
- RE: Using Web mail (hotmail, gmail, yahoo, etc) for Business mails Robert D. Holtz - Lists (Oct 17)
- RE: Using Web mail (hotmail, gmail, yahoo, etc) for Business mails Kurt Aubuchon (Oct 17)
- RE: Using Web mail (hotmail, gmail, yahoo, etc) for Business mails Robert D. Holtz - Lists (Oct 18)
- RE: Using Web mail (hotmail, gmail, yahoo, etc) for Business mails Duncan McAlynn (Oct 17)
- Re: Using Web mail (hotmail, gmail, yahoo, etc) for Business mails Frynge Customer Support (Oct 17)
- Am I owned on port 27665 Faheem SIDDIQUI (Oct 18)
- Re: Am I owned on port 27665 Colin Copley (Oct 19)
- Re: Am I owned on port 27665 Andre Lauw (Oct 19)
- Re: Am I owned on port 27665 nick (Oct 19)