Just curious as we have a compliance need to provide Encrypted email. We are hoping to use this also to get an Exchange 2007 upgrade out of the way. I've been told there is a way using a cert from a trusted root authority that you can encrypt email? Is this just internal? Can it be external and what might be the problem with this as I've for some reason never heard of it before now? If this isn't an option what seems to work best for you?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
I would venture to say that first, not a lot of companies currently find it very important to do encryption on all internal messages. Second, the people that are concerned about encryption are more concerned about external e-mails or only specific types of e-mails (ie confidential marked e-mails). Finally, third party solutions generally provide a lot more options than MS alone and can be disentangled from an Exchange/Messaging team or department easily and managed by a computer security department. Those are just my thoughts, anyone else?
Check out this link under "Confidential Messaging": http://www.microsoft.com/e
Highlights:
"All mail traveling within an Exchange Server 2007 organization is encrypted by default. Transport Layer Security (TLS) is used for server-to-server traffic, Remote Procedure Call (RPC) is used for Outlook connections, and Secure Socket Layers (SSL) is used for Client Access traffic (Outlook Web Access, Exchange ActiveSync, and Web Services). This prevents spoofing and provides confidentiality messages in transit."
"If the destination SMTP server supports TLS (via the STARTTLS SMTP command) when sending outbound e-mail from Exchange Server 2007, Exchange Server will automatically encrypt the outbound content using TLS. In addition, inbound e-mail sent to Exchange Server 2007 from the internet will be encrypted if the sending server supports TLS (Exchange Server 2007 automatically installs SSL certificates)."
From this it seems that external encryption is possible if the recipient SMTP server supports TLS. The advantages of 3rd party encryption might be that it generally works regardless of the recipient SMTP server settings and can be separated from Exchange admins.
Business Accounts
Answer for Membership
by: dworltonPosted on 2007-09-26 at 11:40:23ID: 19965547
Yes, Exchange can do encryption using certificates and a Trust Root CA server. As far as I know it is only internal (perhaps exchanging certs with external recipients in some way would work). It is a decent solution. Another solution that I have used is PGP's Universal Gateway server (www.pgp.com). It handles many encryption functions, works for both internal and external mail, and even provides a secured web-mail box to recipients of confidential data who have not set up their public/private keys.
Hope this helps. Let me know if there are more detailed questions about PGP. I won't be able to tell you exact answers with Exchange because I have not set it up before, just heard the theory.