Re: Secure Email

["H. Morrow Long" <morrow.long () YALE EDU>]

Yale is using IDX's "Patient Online" secure web-based
application at both the Health Clinic and the Medical
School Physician's practice (aka Yale Medical Group)
to provide communication between patients and doctors.

You can think of IDX's Patient Online more as a 'secure
patient portal' which contains secure messaging for
the patient rather than just as a 'secure e-mail' system
as it does more for patients than just securely provide
e-mail between patients and their providers.

You can get a sense of what the user interface looks like at:
   https://yalepatientonline.org/YSMWeb/IDXPOL/Home.asp

- H. Morrow Long, CISSP, CISM
  University Information Security Officer
  Director -- Information Security Office
  Yale University, ITS

On Oct 4, 2004, at 1:46 PM, Clonts, Neal D. (HSC) wrote:

> We have compliance issues that we are trying to meet.  Are we looking
> for the technical solution that will resolve all of our security issues
> with e-mail? Probably not...  Some of the applications that we have
> looked at are Sigaba, Zipcorp, Entrust and so on.  Right now we are
> more
> interested in if anyone is using any type of product for secure email
> not the technical specifications of what truly is secure e-mail.
>
> ---------------------------------------------
> Neal Clonts, CISSP, MCP
> Information Security Services
> University of Oklahoma Health Sciences Center
> Office Phone: 405-271-2476, Option 2
> Cell Phone: 405-255-2999
> Website: http://security.ouhsc.edu
>
> -----Original Message-----
> From: The EDUCAUSE Security Discussion Group Listserv
> [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Matthew Keller
> Sent: Monday, October 04, 2004 11:59 AM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: Re: [SECURITY] Secure Email
>
> "Secure e-mail" is a neat myth. I'm assuming you mean end-to-end
> encryption via SMTPS for sending and IMAPS/POPS for receiving? Please
> keep in mind that this does nothing for "securing" the mail during
> storage, nor does it "secure" mail from "non-S" clients that use SMTP
> or
> IMAP/POP, and transfer that allegedly secured e-mail over the wire(s)
> en
> claire.
>
> If you're referring to another mechanism, feel free to elaborate.
>
> On Mon, 2004-10-04 at 11:59, Clonts, Neal D. (HSC) wrote:
> > Currently we are looking at a secure email solution for our campus.
> > Does anyone currently use a secure email solution in their
> environment?
> > Does your campus environment consist of a health science center?
> >
> > ---------------------------------------------
> > Neal Clonts, CISSP, MCP
> > Information Security Services
> > University of Oklahoma Health Sciences Center
> > Office Phone: 405-271-2476, Option 2
> > Cell Phone: 405-255-2999
> > Website: http://security.ouhsc.edu
> >
> > **********
> > Participation and subscription information for this EDUCAUSE
> Discussion Group discussion list can be found at
> http://www.educause.edu/groups/.
> --
> Matthew Keller
> signat-url: http://mattwork.potsdam.edu/signat-url/
> "No one ever says, 'I can't read that ASCII E-mail you sent me.'"
>
> **********
> Participation and subscription information for this EDUCAUSE Discussion
> Group discussion list can be found at http://www.educause.edu/groups/.
>
> **********
> Participation and subscription information for this EDUCAUSE
> Discussion Group discussion list can be found at
> http://www.educause.edu/groups/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.

Attachment: smime.p7s
Description: