Email Encryption Questions

[bubarooni]

Hi,

Our HIPAA thug is running around asking me a lot of questions about email security and wants to know what we do and/or can do.

He asked specifically if someone somehow intercepted a message on the internet from our server would they be able to read it. Are messages sent in plain text unless you do something?

I've never paid that much attention to this issue before so I'm looking for a primer on server and client security/encryption.

Thanks!!!

[Krishopper]

Yes, emails are sent across the Internet in plain text unless you do something.

Doing something is typically involved at the email client level (Outlook). If you search the forums for S/MIME, that is an upcoming option for webmail.

Email is horribly insecure, and that probably won't ever change. If it ever does change, that will be the day spam disappears completely.

[bubarooni]

I was afraid of that.

ZWC is our main client to access email.

That HIPAA thug is gonna have a field day with this.

[Krishopper]

Are these Ejails going out to other domains on the net, or just staying internally within you Zimbra servers?

[bubarooni]

Out to other domains.

I might have to look at something like Djigzo. I'll have to do something for sure now that it's been brought up.