Educause Security Discussion mailing list archives

pros and cons of demanding authentication when sending email


From: Charlie Derr <cderr () SIMONS-ROCK EDU>
Date: Tue, 8 Nov 2011 16:14:37 -0500

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greetings esteemed colleagues,
     I'm looking for feedback on a change that may be upcoming on our network.  Up until now we've allowed anyone
on-campus (we're a small liberal arts college with only a few hundred resident students) to send email without
authentication.  We've demanded off-campus connections (via SMTP w/SSL) authenticate with a username and password for
many years now.

     Does anyone still allow unauthenticated sending of emails from on-campus?  If you've recently switched your policy
to deny this feature, has there been any fallout?


             thanks much in advance for any info,
                      ~c
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=VFF1
-----END PGP SIGNATURE-----


Current thread: