Educause Security Discussion mailing list archives

Re: pros and cons of demanding authentication when sending email


From: Roger A Safian <r-safian () NORTHWESTERN EDU>
Date: Tue, 8 Nov 2011 21:25:20 +0000

Greetings esteemed colleagues,
     I'm looking for feedback on a change that may be upcoming on our
network.  Up until now we've allowed anyone on-campus (we're a small
liberal arts college with only a few hundred resident students) to send email
without authentication.  We've demanded off-campus connections (via SMTP
w/SSL) authenticate with a username and password for many years now.

     Does anyone still allow unauthenticated sending of emails from on-
campus?  If you've recently switched your policy to deny this feature, has
there been any fallout?

There are multiple ways to send mail, but, users of our centrally supported email system must authenticate before they 
can send email through it.  As far as I know, this particular feature hasn't caused any fallout.


Current thread: