Re: outlook user/password in clear

From: Karl Levinson, mvp (levinson_k_at_despammed.com)
Date: 03/19/05 

Date: Sat, 19 Mar 2005 11:20:27 -0500

"gmsecguy" <gmsecguy@mail.com> wrote in message
news:eMUkDvJLFHA.3908@TK2MSFTNGP10.phx.gbl...
> I notice that when I use my outlook 2000 sp1 with XP I can see the user
name
> and password in the clear as it goes to the SBC sever they say it is a M/S
> problem or I have a password cracker allowing it to go out that way. Well
I
> know I have no cracker sw. fresh install. Is this the way outlook normally
> sends out user/password or maybe Iam missing a setting.

It's not a MS flaw, your email client is using whatever standard
non-Microsoft protocol that is enabled on your mail server. MS provides
ways to encrypt this, but it's up to your mail server admin to make it
possible for you to use these. Most people and servers use unencrypted POP3
and SMTP and/or IMAP for authentication and communication, especially for
Internet email. I'm not sure who is saying this is a MS problem or why they
are saying it, but they are dead wrong. Get them to provide specifics on
why it is a MS problem and what encrypted protocols they have enabled on
their mail server. They would need to provide instructions as to how to
enable whatever kind of encryption they have decided to use, not MS.

Relevant Pages

  • Re: encryption
    ... I'd like to find a way to encrypt email. ... The end result email would have to have some kind of decryption client ... The goal is to have the encrypted text on the mail server and decrypt it ... they have good IMAP support and support for decent filtering rules...I ...
    (Ubuntu)
  • Re: encryption
    ... containing sensitive data? ... I'd like to find a way to encrypt email. ... The end result email would have to have some kind of decryption client ... The goal is to have the encrypted text on the mail server and decrypt it ...
    (Ubuntu)
  • Email Encrption
    ... If I have two companies emailing each other how easy/difficult is it to ... encrypt all email they send to each other of the mail server side. ...
    (microsoft.public.security)
  • Re: Email forwarding security
    ... It's not hard to set up a mail server to save a copy of any ... email correspondence remains private, then you need to encrypt it. ...
    (comp.os.linux.networking)
  • Re: Alarming LACK of security in OS X
    ... So you are saying that the security in OS X is dependant on the user doing the correct thing? ... On the mail server information you pointed me to earlier, it would be easy enough just to add the .app extension to the list of files not to send, etc. ... Seeing that there are still enough people out there that randomly click on crap, I believe that more drastic measures need to be in place to protect the computing community at large. ... Microsoft has made claims that driver signing has reduced their costs by increasing driver reliability. ...
    (comp.sys.mac.advocacy)
Quantcast