TLS encryption for emails

[Bcshay]

Luke - this is fantastic news to kick off the weekend.

For those of us like Chase and I who are internal and support an organization would love it. Since we don't support external clients it would be easy for us to implement but just cost us the cost of a certificate.

[Bcshay]

Any update on this Luke? All you need to do is turn on opportunistic TLS for inbound mail.

This is still a huge security concern as un encrypted mail often contains sensitive information such as usernames and passwords.

[Bcshay]

This reply was created from a merged topic originally titled TLS connections for SMTP.

Please keep security in mind with this release. We are still waiting for the service desk to accept inbound TLS connections for SMTP.

Note: This conversation was created from a reply on: Fresh New Look Coming March 23, 2015.

[GlennD]

Hi, this is planned for Q2 of this year. 

[Chase Beydler]

Please keep us a bit better updated on this. We were told that it was going to be completed in a matter of months when I first pointed it out to support, and it was only half implemented over a year later.

[Bcshay]

As we can see with all the data breaches occurring weekly security is a very serious topic. Sending sensitive information via SMTP in clear text is a huge vulnerability. A secure IT Service Desk is of high importance. Customers should not need to worry about insecure communications. Further security mechanisms to harden or lock down electronic communications would be nice too.

BTW: desk.gotoassist.com scored a C via an SSL report and is vulnerable to POODLE attacks. Citrix should be using TLS and not SSLv3 to secure communications to desk.

https://www.ssllabs.com/ssltest/analyze.html?d=desk.gotoassist.com