Educause Security Discussion mailing list archives

Re: Secure communication of passwords


From: "Tipps, Greg (Greg Tipps)" <rtipps () UTK EDU>
Date: Wed, 28 Jan 2015 22:07:43 +0000

UTK's Office of Information Technology wrote a similar solution for our campus that authenticates to LDAP 
(https://vault.utk.edu) and allows registrations by email address for non-affiliated users. It has been a significant 
asset for us.

--
Greg Tipps
Parking and Transit Services
University of Tennessee Knoxville

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Shalla, 
Kevin
Sent: Wednesday, January 28, 2015 4:56 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Secure communication of passwords

We wrote the application Protected Email Attachment Repository for this.. We have a video showing features: 
https://www.youtube.com/watch?v=7qqXZIgzj2I

Kevin Shalla
Academic and Enrollment Services
University of Illinois at Chicago

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Thomas 
Carter
Sent: Wednesday, January 28, 2015 3:27 PM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Secure communication of passwords

On occasion we need to communicate a password (with a possible username) with a user. This is generally for some 
external system that doesn't integrate into existing authentication mechanisms. Per our policy, we can't send the 
password via email and it shouldn't be written down. We generally try to communicate it via a phone call if possible, 
with a text message to a verified number as a backup. Unfortunately neither of these are convenient, so I wondered what 
others are using for this task.

Thomas Carter
Network and Operations Manager
Austin College
903-813-2564
[AusColl_Logo_Email]


Current thread: