Re: Gmail confidential mode

[Scott Norton <dsnorton () UW EDU>]

Are you blocking any of the many other email encryption services in bound? If not is there something about Google you 
are finding worrying more then any other of top 20 or so vendors in this space?

________________________________
From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of WALTER KERNER 
<Walter_kerner () FITNYC EDU>
Sent: Tuesday, October 8, 2019 5:58:38 AM
To: SECURITY () LISTSERV EDUCAUSE EDU <SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Gmail confidential mode

Our Council is concerned about accepting confidential emails from outside.  The concern is that if an email is on Legal 
hold, the sender could revoke it, so you don’t really know what you have preserved.



Walter

Walter Kerner
Assistant Vice President and CISO
212 217 3415
[blue and black logo two lines png]

[https://lh6.googleusercontent.com/UfFmyv7z6Vvv1txQ9YVAOzexd6VEBLzwpWJW_emTmE-oOg-W5_Er-7LKogTDdF3BU49D7-cZZK3K2fH0dwoA0uTH_g1zh8Ul4e1hHQOI8hw7GY3GgLzEhjAPLi7V6RLiQ3eXLu48]

From: The EDUCAUSE Security Community Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () 
LISTSERV EDUCAUSE EDU>] On Behalf Of Jared Evans
Sent: Tuesday, October 08, 2019 8:53 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Gmail confidential mode

We have gotten requests from several departments asking to turn on Gmail confidential mode for our Google domain.

There seems to be no concerns in regards to retention and visibility into the messages for emails sent from the Google 
domain.   As per Google support on how Vault handles these confidential emails:
"If your organization enables Gmail confidential mode, Vault can hold, retain, search, and export all confidential mode 
messages sent by users in your organization."

However, I would like to know if there may be any other info sec issues resulting from the use of confidential emails 
that may affect the decision on whether or not to make this capability available to the users on our domain.

--
[https://docs.google.com/uc?export=download&id=0B06ctamGLs2hSzVkWTREblhkS0E&revid=0B06ctamGLs2hcERDbFA5bHFLY01XU0VLV2Z0Z3VGR1dQY25ZPQ]
Jared Evans
Information Security Officer
Gallaudet Technology Services
Gallaudet University
jared.evans () gallaudet edu
<mailto:jared.evans () gallaudet edu>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cdsnorton%40uw.edu%7Cc9980da94f404f59f2d208d74bef43ee%7Cf6b6dd5bf02f441a99a0162ac5060bd2%7C1%7C0%7C637061363324679326&sdata=6ZPUgPYDcWefgJExVftUz6CoZQDQ%2F1CNr%2BUchKgbhWk%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam05.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cdsnorton%40uw.edu%7Cc9980da94f404f59f2d208d74bef43ee%7Cf6b6dd5bf02f441a99a0162ac5060bd2%7C1%7C0%7C637061363324679326&sdata=6ZPUgPYDcWefgJExVftUz6CoZQDQ%2F1CNr%2BUchKgbhWk%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community