Does Exch 2010 ssl cert encrypt messages sent via internet as well as inhouse?

[techseek]

A prospective consultant told me it only encrypts the "connection" and that I need a third party like PGP to enccrypt the actual data sent
???

 

[58sniper]

Correct. Exchange will encrypt the session. If you need to also encrypt the data itself, you'll need a third party solution. This will require public and private keys on both sides of the conversation.

Do you have your Tek-Tips.com Swag? I've got mine!

Stop by the new Tek-Tips group at LinkedIn.

 

[techseek]

Thank you sniper
I am having a problem understanding what "encrypted connection" means.
or, rather, what protection that offers. What do HTTPS: sites offer on top of the encrypted connection for protection of the sensitive data?
Am I understanding correctly though, that in the LAN (domain), the client server comm is encrypted (so that interoffice email content is encrypted) out of the box?

Thank you very much for helping me understand this

 

[strongm]

>What do HTTPS: sites offer on top of the encrypted connection for protection of the sensitive data?

Not a lot, actually. They try to guarantee that the site you think you are connected to is indeed the site you are connected to. Of course that doesn't in itself gaurantee that it is a secure site.

 

[58sniper]

SSL secures the connection between the endpoints, assuming a trusted cert chain and a valid cert.

Do you have your Tek-Tips.com Swag? I've got mine!

Stop by the new Tek-Tips group at LinkedIn.

 

[ShackDaddy]

In contrast, message encryption ensures that the message cannot be read until it reaches the destination server. It could not be looked at in the queue on a Barracuda somewhere, for example.

TLS/SSL only encrypts the conversation between your server and the server it first communicates with when sending out your message. That's not always the destination server, although it sometimes is.

Dave Shackelford
ThirdTier.net
TrainSignal.com

 

[fuego007]

Communication between Outlook and Exchange Server is encrypted by default. You can deselect this, but I don't know why anyone would.

TLS will encrypt the data between the two internet end points (i.e. SMTP gateway, such as an Edge Transport server. Even products such as Zix do not encrypt the message all the way to the mailbox. I would be surprised if a company would allow the use of an encryption product that could prevent management from being able to read an employee's email. Using TLS or a third-party product such as a Zix gateway should provide adequate message security. Zix is used by a number of US Government agencies.


When all else fails, read the book!