RE: Using Web mail (hotmail, gmail, yahoo, etc) for Business mails

["Laundrup, Jens" <Jens.Laundrup () METROKC GOV>]

There are legal and regulatory issues that you would have to watch out
for since there are strict records keeping requirements and audit
requirements that you have to meet (the fines can be very big for SEC
violations)  I would strongly recommend against it.  

I would go as far as suggesting that those mail services should be
blocked to ensure that all corporate mail is restricted to the corporate
network.  Also, you must keep in mind that as the employer, you can be
held liable for people who receive "offensive" mail that others see.  In
a corporate network, you can state that all e-mail is subject to
monitoring whereas if the employees use their personal mail at work, you
have no audit trail and as such a simple claim (one persons word against
another persons word) can land you in some expensive and very hot water.


All in all; bad idea!

Jens 


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Steven Meyer
Sent: Monday, October 16, 2006 2:39 PM
To: sfmailsbm () gmail com
Cc: security-basics () securityfocus com
Subject: Re: Using Web mail (hotmail, gmail, yahoo, etc) for Business
mails

hi,
as fare as I know all of the famous webmail (gmail, yahoo hotmail etc)
are quite secured (https connections, time out, fishing warnings,
brutforce proof etc.) and have regular backups to avoid data lost.
but if you are paranoiac and you want a really good privacy and
secured webmail I would advise you to use www.hushmail.com .
It is very secured all the data is secured on the server. When you
enter your passphrase, it is decrypted locally with a Java applet on
your computer so all the data send is secured.
it is fully compatible with PGP.
the best is you can open a account for free.
hope it helps.
Steven

16 Oct 2006 06:00:16 -0000, sfmailsbm () gmail com <sfmailsbm () gmail com>:
> Dear List,
>
> It is a common practice among users to user their personal email
accounts like hotmail, gmail, etc to send & receive business (and most
probably confidential) information
> This is particularly the case when users are out of office
>
> These webmails are not under the company's control, and hence there is
a risk of information loss. However upto now we have not heard of any
such cases
> Wanted to get the opinion of the list on the security risks of the use
of Webmails for business mails
> Thanks & regards
------------------------------------------------------------------------
---
> This list is sponsored by: Norwich University
>
> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
> The NSA has designated Norwich University a center of Academic
Excellence
> in Information Security. Our program offers unparalleled Infosec
management
> education and the case study affords you unmatched consulting
experience.
> Using interactive e-Learning technology, you can earn this esteemed
degree,
> without disrupting your career or home life.
>
> http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---
>

------------------------------------------------------------------------
---
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic
Excellence 
in Information Security. Our program offers unparalleled Infosec
management 
education and the case study affords you unmatched consulting
experience. 
Using interactive e-Learning technology, you can earn this esteemed
degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
------------------------------------------------------------------------
---



---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence
in Information Security. Our program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Using interactive e-Learning technology, you can earn this esteemed degree,
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------