Educause Security Discussion mailing list archives

Re: Notifications of external emails


From: "Napier, Mark E" <mnapier () INDIANA EDU>
Date: Wed, 8 Feb 2017 15:04:05 +0000

What about encouraging or requiring your users to use S/MIME to sign their emails? That would also cover the situation 
in which a machine on the internal network is engaged in pushing. (In most cases, anyway)

--
Mark E. Napier   MIS, CIPT
Deputy Director of Information Technology /
Chief Information Privacy and Security Officer
School of Informatics and Computing
Indiana University









On Feb 8, 2017, at 9:57 AM, Thomas Carter <tcarter () AUSTINCOLLEGE EDU> wrote:

We are trying to combat phishing by making users more aware of emails that come from outside campus vs internal 
emails. We’ve trialed using a mail rule to modify the subject line and prepend a flag (like “EXTERNAL:” or similar) 
but users complained it caused confusion (?) and they didn’t like emails to be modified. I suspect a disclaimer added 
to the body of the message would be either ignored or disliked for the same reasons.
 
Has anyone else done something to somehow flag external emails? What was the feedback? How well does it work?
 
Thomas Carter
Network & Operations Manager / IT
Austin College
900 North Grand Avenue 
Sherman, TX 75090
Phone: 903-813-2564
www.austincollege.edu <http://www.austincollege.edu/>
<image001.gif>

Attachment: smime.p7s
Description:


Current thread: