Re: email fowarding

From: Matthew Carpenter (giddyboy@satx.rr.com)
Date: 06/27/02 

From: "Matthew Carpenter" <giddyboy@satx.rr.com>
To: "Marcus James" <marcus01@post.com>, <security-basics@securityfocus.com>
Date: Thu, 27 Jun 2002 13:01:51 -0500

To give a blanket ability/forced to forward mail outside the company is
almost as bad as having your mail server exposed to the public completely. I
think this is a VERY bad idea.

If you can implement something like OWA on a secure channel, that would be a
much better option. I would certainly express my dismay to management about
allowing all email to go to outside mailboxes

----- Original Message -----
From: "Marcus James" <marcus01@post.com>
To: <security-basics@securityfocus.com>
Sent: Wednesday, June 26, 2002 5:44 PM
Subject: email fowarding

Here's the situation:

One of the companies I work at enables certain users to foward their email
to an external address of their choice. So internal email sent to an
employee may be fowarded externally to a hotmail account for example. What I
am trying to determine is what the best practices are in this regard. My
gut-feel says that this is not a good idea since email is "inherently
insecure" and may be intercepted and so on and so forth. But on the other
hand is this such a big deal? I'm not sure.

A second question: Would forcing users to use a web interface to access
their email instead be "more secure"?

Thanks... 

--
__________________________________________________________
Sign-up for your own FREE Personalized E-mail at Mail.com
http://www.mail.com/?sr=signup

Save up to $160 by signing up for NetZero Platinum Internet service.
http://www.netzero.net/?refcd=N2P0602NEP8