Email Encryption

Hello all,

There is a new business requirement for us to both send and receive encrypted emails with and without encrypted attachments. A new customer of ours will be sending us and expecting to receive emails and attachments that have been encrypted to a high standard. I have not used anything like this since college and the command line version of the then free PGP. Is PGP still the standard?

Can anybody offer a solution that must integrate with Exchange (not pop/smtp) and that is easy to use for non-technical staff.
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Outlook has the capability of creating and receiving encrypted messages now.  Do a search on encryption in help, it is all explained there and, of course, integrates with Exchange.

Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

Jamie McKillopIT ManagerCommented:

What are the requirements? Does the email need to be encrypted in transit or does it need to remain encrypted on the mail server? If it just needs to remain encrypted in transit, you could setup TLS between your mail server and your partner's mail server. That would encrypt all mail traffic automatically without any action required on the user's part.

Dave HoweSoftware and Hardware EngineerCommented:
As you could probably derive from the above, there are two major standards (and some propriatory solutions such as cisco's CRES)

The one built into almost all email clients is S/MIME (aka Privacy Enhanced Email) - it uses similar X509 certificates to website (https) security which can be obtained (or self generated) in a similar fashion. if you have exchange/outlook, then there are mechanisms in place to centrally "push" certificate creation and management.

The second scheme is pgp (now an rfc standard) which has two major suppliers - pgp the company, and the open source package "gpg" - both have integration into outlook, although for gpg thunderbird and its "enigmail" plugin is considered superior.

I would suggest though, if you are taking this on for a customer in particular, asking them what they would prefer to use - remember that they will have to have software and keys in place before you can send encrypted mail to them, so as a first step I would suggest finding out what they have already (definitely before you spend any money :)

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
For GnuPG, you get to try it free. Here is the link to the software you need. You can use the GUI based GPA to get acquainted.

The other option too can be tried for free. You can use a free Comodo email certificate for trials from here

Choose the one you feel comfortable using.
Dave HoweSoftware and Hardware EngineerCommented:
Try it free *and* keep it free :)

GPG, particularly with thunderbird/enigmail, is an excellent solution.

as for email certificates for s/mime, you can make your own, trivially - I usually use but both microsoft enterprise servers and netware edirectory servers come with certificate issuing software.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.