Re: is http mail secure?

From: Steve Carr (scarr_at_bastyr.edu.NOSPAM)
Date: 03/02/05 

Date: Wed, 2 Mar 2005 13:19:53 -0800

get a cetificate for your server (from Verisign, Thawte etc) and install and
then use https. You can do this by going into IIS and going to the
Properties of the Virtual Site, selecting the Security tab and clicking on
Certificates at bottom. Create a request, save it as a txt file and then
follow directions at the Certificate Authority you pick.
If you don't, nothing is encrypted (unless you use integrated security, then
your password is encrypted but only IE users can get there) so it is highl
recommended to get a cert and go to https

"Bill Brehm >" <<don't want any spam> wrote in message
news:OsmTkAwHFHA.4060@TK2MSFTNGP14.phx.gbl...
> Exchange 2000 running on Windows 2000.
>
> I recently discovered and want to enable HTTP access to the exchange
server
> for our people on the road. I can get it to work, but I'm worried about
> security. I can access by http://myIPaddress/Exchange. There is no little
> lock at the bottom telling me it's secure. I cannot access with https. Is
> the data going over the internet encrypted? Is the username and password
> encrypted?
>
> I know I could force them to VPN into our network then HTTP from within.
But
> that's a bit complicated for some of our users. Aside from that, how can I
> make sure it's secure?
>
> Thanks,
>
> Bill
>
>

Relevant Pages

  • Re: Security of IIS - Secure Intranet web site on SBS2003 box
    ... IIS there was a known payload which could be used to introduce further ... Many security people take the stance 'the system has been compromised, ... HTTP vs HTTPS and/or RPC over HTTPS ... >> to rebuild their server and return everything to normal. ...
    (microsoft.public.windows.server.sbs)
  • Re: RWW with no https
    ... Speaking about MS IIS as a web server, in HTTP, one can run multiple ... "host headers" and run all sites on the default port 80. ... to workstations, runs on port 4125, which is dynamically opened by the SBS ... HTTP why cant you do the same with HTTPS? ...
    (microsoft.public.windows.server.sbs)
  • Re: Outlook 2003 cant see Exch 2003 over RPC
    ... To help you troubleshoot RPC try RPC Ping, ... working on the LAN side is my priority rather than the external HTTPS ... server endpoints and let me see what it's trying to do and perhaps what's ... You stated you did get RPC over HTTP to work for a while when the SBS ...
    (microsoft.public.exchange.setup)
  • Re: Ethernet cable question.
    ... I have developed Web HTTPS site ... solutions on the server and on the client end. ... *CAN* be secure. ...
    (microsoft.public.windows.vista.general)
  • Re: RWW with no https
    ... I thought Kerio was on the same ... I understand it is just another web server on the network with SBS. ... it is just a web server, why not change its HTTPS port instead of changing ...
    (microsoft.public.windows.server.sbs)