Re: HOW TO encrypt and store mail

If you even don't trust your sys admin then there is nothing you can do=20
... There are sys admin, they can do all what they want.

I don't understand why with a 2008 domain & Exchange you would use a=20
deprecated end user application like Outlook Express ?!

If you are concerned about security , give a try to OWA, nothing will be=20
stored / cached on the user end, full SSL with https.

For the server part, did you tried something like EFS or bitlocker, it's=20
possible to use such a feature on windows server.
With such a solution, extracting the filesystem from the server would be=20
pointless because the FS or the files would be encrypted.

Regards,
Laurent

On 12/01/2011 18:30, Edgar Zapata wrote:
> Thanks Kurt.
> I guess that won't do.  As far as I know, and based on the tests that w=
e've been performing, it only provides for a way so in case the disks are=
 robbed/stolen they won't be readable unless you have a key (stored in a =
say removable USB drive).
> It won't prevent the system admin from reading the contents of the mail=
s or even making copies of the .edb and .stm files for later misues.
>
> We're still searching and testing so I'm open to suggestions.
>
> Thank you.
>
>
> Edgar Zapata
> EMEA Data Systems
> +34 913.797.460 T
> +34 680.398.372 M
> [email protected]
>
> Sitel
> Calle Impresores, 20 - Planta 2
> Parque Empresarial Prado del Espino
> Boadilla del Monte - Madrid 28660
> SPAIN
> www.sitel.com
>
> Please consider the environment before printing.
>
> -----Mensaje original-----
> De: Kurt Dillard [mailto:[email protected]]
> Enviado el: mi=E9rcoles, 12 de enero de 2011 18:22
> Para: Edgar Zapata; [email protected]
> Asunto: RE: HOW TO encrypt and store mail
>
> Your using Windows Server 2008, so why not use BitLocker to encrypt the=
 entire drive?
>
> Regards,
>
> Kurt
>
> -----Original Message-----
> From: [email protected] [mailto:[email protected]=
] On Behalf Of Edgar Zapata
> Sent: Wednesday, January 12, 2011 8:09 AM
> To: [email protected]
> Subject: HOW TO encrypt and store mail
>
> Hello,
>
> We are looking for a solution to store and encrypt mails.
>
> We need to comply with PCI (Payment Card Industry) standards.
> We have Windows 2008 and Exchange 2007 SP2.
>
> So far, we haven't found a way to encrypt and store mail in Exchange.
> We'll be encrypting communications with TLS.
>
> Plus, we need to use OE (Outlook Express) so we can use IMAP for incomi=
ng mail and SMTP for outgoing e-mail.
>
> Any ideas/suggestions are more than welcome.
>
> Thank you.
>
>
> **CONFIDENTIAL NOTICE**
> This e-mail and any files transmitted with it may contain PRIVILEGED or=
 CONFIDENTIAL information and may be read or used only by the intended re=
cipient.  If you are not the intended recipient of the e-mail or any of i=
ts attachments, please be advised that you have received this e-mail in e=
rror and that any use, dissemination, distribution, forwarding, printing,=
 or copying of this e-mail or any attached files is strictly prohibited. =
 If you have received this e-mail in error, please immediately purge it a=
nd all attachments and notify the sender by reply e-mail.
>
> **CONFIDENTIAL NOTICE**
> This e-mail and any files transmitted with it may contain PRIVILEGED or=
 CONFIDENTIAL information and may be read or used only by the intended re=
cipient.  If you are not the intended recipient of the e-mail or any of  =
its attachments, please be advised that you have received this e-mail in =
error and that any use, dissemination, distribution, forwarding, printing=
, or copying of this e-mail or any attached files is strictly prohibited.=
  If you have received this e-mail in error, please immediately purge it =
and all attachments and notify the sender by reply e-mail.