Forum Discussion
TLS encryption for emails
Anyone else realize that the emails that come out of Service Desk are not being sent with any type of TLS encryption support? We just realized that all data in emails are not encrypted when they come out of the GTA mail server.
This is a dead simple thing to fix and we cannot believe that such a corporate service would not have any type of mail encryption.
Anyone have any thoughts on this?
This is a dead simple thing to fix and we cannot believe that such a corporate service would not have any type of mail encryption.
Anyone have any thoughts on this?
35 Replies
Replies have been turned off for this discussion
- Hi guys,
Per comments above, I have been pushing to get this change completed. With that, I have good news, I just received word that we have TLS enabled for the past 24 hours.
You may have noticed we have had issues with sending email over the past couple of days, but we were able to confirm that was unrelated to the TLS change.
Please let myself or our support team know if you experience any issues. - Who knows.
- Great thanks! is that the "Product" Manager Luke? And thanks for keeping me in the know.
- "Thank you for checking back. The Project Manager of Service Desk is pushing to get this setup with hopes it can come to fruition before the end of the year. I will keep you posted on updates as I receive them."
- Did you ever find anything out Chase? I know they're busy dealing with the latest GTA release problem.
- I sent an email to our team and CIO to address this and he was concerned. Also comments checked as Hidden do get sent via the resolved and closed notifications to Users so that workaround is not going to work. We just have to be careful not to include any confidential info in the interim.
Can you please let me know their response to your second inquiry? Thanks.
They're going to have to not only implement TLS for SMTP but also IMAPS or something so that messages sent to the service desk are also encrypted. For us we can use an exchange mailbox. For others that support external clients it's still going to be an issue with messages sent to the service desk. They may have to disallow replies to notifications entirely. - How did that conversation go, Brenden? About to send another email asking for a status.
- I've got to address this with our CIO today so that he is aware and I am not responsible if a breach occurs. Still my fault though for neglecting this before signing up for the service.
I can't believe your IT audit didn't catch that... - Indeed. We lucked out and our audit that just occurred didn't ask anything about this, but I have a feeling that I may need to look at another solution come next year if this isn't addressed with more than "It is on the roadmap".
- Cheers Chase! Security flaw yes but also a security risk to all customers using the service.
