Educause Security Discussion mailing list archives

Re: Encrypting Data-in-Transit


From: "Scholz, Greg" <gscholz () KEENE EDU>
Date: Wed, 16 Feb 2005 09:12:11 -0500

There are some products that give full control over what can be done
with email(forward, copy, etc) by a recipient (in addition to
encryption) and most of them are controlled by the sender and/or the
system. ZixMail, IronMail, Authentica and some others do this.  Sorry no
personal experience with them.


_________________________
Thank you,
Gregory R. Scholz
Lead Network Engineer
Information Technology Group
Keene State College
(603)358-2070


-----Original Message-----
From: Valdis Kletnieks [mailto:Valdis.Kletnieks () VT EDU] 
Sent: Wednesday, February 16, 2005 12:16 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Encrypting Data-in-Transit

On Tue, 15 Feb 2005 21:03:29 CST, Alan Amesbury said:

"confidential and privileged information" that might accompany it.  An
even more effective approach (inasmuch as such disclaimers can be
labelled "effective") would be to place the disclaimer first,

My personal favorite are the requests that we delete "all" copies of the
message.

My canned reply to these things asks if they're willing to indemnify us
for the
downtime of a mail server that handles 1M+ mails/day for 70K+ users,
including
finding *all* the blocks (including swap space and the like) and making
sure
that said mail will *never* be recovered off some very high-performance
and
expensive RAID-5 that's there just so things have a very hard time going
away
without permission.  And oh yeah, there will be a charge for rebuilding
all our
backup tapes and destroying the old tapes, because of *course* they
wouldn't
want to end up like Col. Oliver North, convicted largely on the basis of
e-mail
scavenged off the backup tapes:

http://www.fas.org/spp/starwars/offdocs/reagan/chron.txt

:)

**********
Participation and subscription information for this EDUCAUSE Discussion
Group discussion list can be found at http://www.educause.edu/groups/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/groups/.

Current thread: