Gmail getting a new 'Confidential Mode' to lock down sensitive messages

[enjay]

What confidential mode does bring is the inability to open the message without the code (unlike on O365 where you just click on the link and it opens - never been quite sure what this is achiving...). I've not seen that on anything other than a separate third party product that both ends need to subscibe to. So you need the login details of the individual (maybe get past 2FA - in our case) and nick their mobile phone to read the message.

 

Agreed, that is very nice. Not suitable in all situations, but probably workable for the times we need to send lots of information. I am not sure we'd get staff engaging with it when emailing parents about their individual kids though.

[mavhc]

Simplest thing to do is zip the file with a password, and then phone them to tell them the password

[mavhc]

I did a guide a while back - https://wpsit.blogspot.com/2018/06/smime-email-signature-and-encryption.html

 

Question is still how to I generate all the certs for my users? I've proven I own the domain, why can't I make certs for email addresses in that domain?

[Arthur]

Comodo have also stopped offering free S/MIME certs after their Sectigo rebrand.

 

They cost $27.16 each for a three year certificate.

[mavhc]

Given the lack of use they'll get if they're not free and automated then no one will care enough to use them

[FN-GM]

SMIME is just about encryption during transit though isn't it, not at rest in the Outlook PST file on the recipient's computer?

 

You might as well send it via TLS instead of messing with SNIME.

[mavhc]

Has anyone enabled only TLS SMTP? Or found any way to get stats on what %age of emails aren't using TLS?

[Arthur]

Given the lack of use they'll get if they're not free and automated then no one will care enough to use them

It's a shame Let's Encrypt don't do S/MIME certs. You're right that they need to be free and automated.

[Arthur]

Or found any way to get stats on what %age of emails aren't using TLS?

Office 365 has TLS stats in the Mail Flow dashboard.

 

https://protection.office.com/#/mailflow/dashboard

 

[mavhc]

99.8% outgoing were TLS 1.2, but there's supposed to be a "Connector Report" link on that page, can't see it on mine. Just need to know what the 14 non 1.2 emails were and then I can block no TLS outbound. Inbound only 68% :-(

[Arthur]

99.8% outgoing were TLS 1.2, but there's supposed to be a "Connector Report" link on that page, can't see it on mine. Just need to know what the 14 non 1.2 emails were and then I can block no TLS outbound. Inbound only 68% :-(

That report is on the Insight Dashboard (near the bottom of the page).

 

https://protection.office.com/#/insightdashboard

 

https://protection.office.com/#/reportv2?id=ConnectorReport&pivot=ConnectorDisplayName

[mavhc]

That report is on the Insight Dashboard (near the bottom of the page).

 

https://protection.office.com/#/insightdashboard

 

https://protection.office.com/#/reportv2?id=ConnectorReport&pivot=ConnectorDisplayName

 

Still can't find a list of emails that didn't use TLS though. I've created a partner connector to force TLS for *, let's see what happens.

 

Found it, created new thread: http://www.edugeek.net/forums/cloud-services/204977-list-common-email-domains-dont-support-tls.html

Edited March 15, 2019 by mavhc