Re: Reading encrypted mail?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Jims (biz_at_neocasa.net)
Date: 03/20/04 

Date: Sat, 20 Mar 2004 13:02:25 -0500

Thanks

"David Sengupta [MVP]" <sengupta@*N0*ncf*SPAM*.ca> wrote in message
news:%23zvogFjDEHA.2424@TK2MSFTNGP09.phx.gbl...
> Nope. There's a public key and private key involved ... the key pair are
> required to decrypt the email. The GAL just contains the public key.
> Delegates may have access to the public key (i.e. through GAL) but the
> private key should be for the user only and therefore only the user can
read
> the email (or someone sitting at their computer impersonating them, of
> course).
>
> --
> David Sengupta M.T.S., B.Sc., MVP, MCSE, MCSE 2000, CCA Ottawa, Canada
> Exchange Reporting & Analysis: http://www.quest.com/messagestats/
> Exchange FAQ - http://www.swinc.com/resource/exch_faq.htm
>
>
> "Jims" <biz@neocasa.net> wrote in message
> news:OP9K4DgDEHA.3784@TK2MSFTNGP10.phx.gbl...
> > Is it possible as an Exchange Full Admin to open a user's mailbox and
read
> a
> > message that was sent to them by a domain user and encrypted with the
> > recipients cert (stored in the GAL)? Is it possible for user's with
> > delegated mailbox access to read received encrypted messages in the
> mailbox?
> > Trying to get an idea of how secure encrypted mail is in
outlook/Exchange
> > 2003.
> > thanks,
> > biz
> >
> >
> >
>
>

Relevant Pages

  • RE: PGP scripting...
    ... cryptosystems, ... In these systems divulging your private key compromises the public ... Here is a quick over view of the public key encryption routines (the ...
    (SecProg)
  • Re: Private & Public Key storage location
    ... with that you complete the 'certificate' to have both public and private key ... To view the complete cert, you access the cert mmc, ... its end & send only the public key to the CA along with the other websites ... The CA never know the private key of the website. ...
    (microsoft.public.inetserver.iis.security)
  • CryptImportKey NTE_BAD_KEY error.
    ... of the private key is just fine but when I try to import the public key I ... // This Asymetric key set will be used to create the Autherization Code. ... delete psBuffer; ...
    (microsoft.public.security)
  • Re: Private & Public Key storage location
    ... client use the public key to ... corresponds to this certiticate' when you view the cert. ... it will has the private key as well. ... installed for your website, it will be sent to all the clients who connect ...
    (microsoft.public.inetserver.iis.security)
  • CryptImportKey NTE_BAD_KEY error.
    ... of the private key is just fine but when I try to import the public key I ... // This Asymetric key set will be used to create the Autherization Code. ... delete psBuffer; ...
    (microsoft.public.platformsdk.security)