Re: how to email from public wireless network?

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Yves Konigshofer (ykoniREMOVEgshofer_at_hotmail.com)
Date: 08/14/04


Date: Sat, 14 Aug 2004 00:30:06 -0700

If it's just for e-mail, a VPN may be a bit much. VPNs allow remote users
to connect to office LANs using an encrypted connection. Once they are
connected, everything is supposed to work as if their computer is located
inside the office.

The easiest way to secure the out-of-office e-mail is to use a mail server
that supports SSL. That would encrypt everything sent between users and the
server and is supported by the major e-mail programs.

We've got numerous ways to access our e-mail securely when away.
One way is to use Kerberos-based authentication and encryption. That works
reasonably well but is not supported properly by Outlook (Eudora works) and
thus needs a bit of additional software (not to mention quite a bit of
server infrastructure). There's also a slight problem when using Kerberos
from behind a router, which most people use at home.
The most common way is to connect to the SMTP/POP3/IMAP servers using SSL.
That's relatively straightforward but is limited to e-mail in that you have
to authenticate separately to each server (not an issue once Outlook is
configured). Most ISPs block the usual SMTP port (except to their own SMTP
server) but this is not the case for the default SSL SMTP port (and you can
move it).
Another option is to use VPN software, which makes it appear as if the
computer is located somewhere on the LAN. However, anything sent over the
LAN is no longer encrypted (that is probably not a major issue). There are
some routers available that will serve as a VPN endpoint (e.g.
ftp://ftp.linksys.com/pdf/wrv54g_ug.pdf).

-Yves

"ayoung" <young98-nospam@hotmail.com> wrote in message
news:%236YU4TYgEHA.1184@TK2MSFTNGP12.phx.gbl...
> Can you tell me where to learn more about this vpn email systems?
> May be we should set up for all our sales staff to use this in their
> laptops?
> Thank you very much.
>
> "Yves Konigshofer" <ykoniREMOVEgshofer@hotmail.com> wrote in message
> news:eGfq1EWgEHA.1276@TK2MSFTNGP09.phx.gbl...
>> Well, there is a right way and a wrong way to do office e-mail when
> outside
>> the office. The right way involves ensuring that no e-mail and no
> passwords
>> are sent in a way that can be read by others. This is done using
> encryption
>> all the way from your computer to the office and usually does not require
>> any special changes when moving from one public access point to another.
>>
>> -Yves
>>
>> "
>
>



Relevant Pages

  • Re: Advice needed on secure remote datacenter and secure communication
    ... fair bit of time working with windows server, ... as for VPN, ... Addressing your issue with PGP encryption on sensitive files, ...
    (alt.computer.security)
  • Re: vpn access from hotel room
    ... If you have a dedicated workstation on the LAN (or just access to any LAN ... users to keep all their data on the server so it's ... A VPN requires significantly more bandwidth ... If you're laptop has been joined to the SBS domain, ...
    (microsoft.public.windows.server.sbs)
  • Re: Routes
    ... succeed with the original requirements because it won't limit LAN access to the ... access to only the Terminal Server by using something like ISA,...once the user ... I will allow full network access to the VPN clients. ... terminate at the servers and no further into the LAN. ...
    (microsoft.public.windows.server.networking)
  • FW: AD replication over WAN
    ... From Microsoft Exchange 2000 Server Hosting Series ... OL2002, clients don't need to employ a VPN across the internet, as the RPC ... care to comment on the relative safety of AD encryption out-of-the-box? ...
    (Focus-Microsoft)
  • Re: Encrypted VPN software?
    ... >>establish the original connection; thereafter the two ends of the VPN ... faraway LAN as if it was just another local computer on that LAN. ... does offer is once-and-for-all encryption and authentication with no need ...
    (alt.privacy)