full-disclosure - SMTP Encryption (S/MIME) for Outlook questi on

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <6CDD95AD0FF2D311BC6A009027DC6B9903DD36DE@MAIL1>
From: jlay at ameriben.com (James Lay)
Subject: SMTP Encryption (S/MIME) for Outlook questi
	on

Brandon,

Check out TLS/SSL for your Exchange server...it's built in and all you need
is to install a couple certs and away you go.  This encrypts server to
server email, so the server on the other side must support STARTTLS as well.

James

-----Original Message-----
From: Fetch, Brandon [mailto:BFetch@...pac.com]
Sent: Wednesday, March 24, 2004 4:18 PM
To: 'full-disclosure@...ts.netsys.com'
Subject: [Full-Disclosure] SMTP Encryption (S/MIME) for Outlook question

No flames here please.  I've just been asked about running some form of
encryption on our mail clients (Outlook) to send encrypted SMTP across the
Internet and would like some opinions/directions.

Our userbase isn't that technical so we'd need something that is pretty user
friendly (I know, divergent goals) but is still secure to a point.

I don't know the exact details on their goals other than preventing random
eavesdropping (sniffing) of clear-text SMTP traffic across the Internet to a
remote, non-internal destination.

What do other Win/Exchange/Outlook IT admins use for S/MIME?  

BTW, if there's something that will run on top of the SMTP gateway server or
the internal Exchange server to encrypt the message before being routed to
the Internet, this is also acceptable.  I figure there must be something
available that works like this.

TIA,

Brandon Fetch
817-871-4036
-- carpe ductum -- "Grab the tape"

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html