Re: Email Encryption

["McClenon, Braden" <mcclenbw () ONEONTA EDU>]

Actually encrypt each message, or encrypt your channels for message retrieval and smtp submission?

Like using IMAPS, POPS, RPC over HTTPS, whatever the optional encryption between Exchange and Outlook is, etc.

Seems like it's going to be hard to run a functional mail server if it will only accept encrypted messages.  Would cut 
down on spam though... :)


Brady McClenon
Senior Server Administrator
SUNY Oneonta
607-436-3203

"My pontifications are much too deep to fit inside a fortune cookie." - Confucius' brother



From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Kevin 
Casey
Sent: Monday, July 25, 2011 2:52 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Email Encryption

We've been encouraged by an outside security firm to encrypt every blessed note that passes through our Exchange 
server.  This firm deals largely with entities such as banks, and I'm wondering if this is over-kill in the context of 
higher ed.

Any thoughts regarding "best practices" on this?

Thanks,

Kevin

__________________________________________
Kevin Casey
Executive Director
Information Resources
Phone:  (207) 941-7123
Fax:  (207) 941-7988
caseyk () husson edu<mailto:caseyk () husson edu>




 Husson University

 www.husson.edu<http://www.husson.edu/>