Re: Security and Outlook over HTTP



Gus:

Outlook uses RPC over HTTPS (not HTTP). The security is the same as you
would get with a secure web page, one who's address begins with HTTPS
and has the lock in the lower-right corner of the browser window. This
level of security, with 128-bit encryption, is considered acceptable for
most Internet uses, including exchanging personal information (assuming
legitimate web sites, of course!) and high-value financial transactions.

Basic authentication (clear-text) is OK in this case because the userID
and password are being sent over an encrypted channel (HTTPS) to the
small business server and Exchange.

-- Owen Williams

In article <C3521E61-6552-4EA1-B2FB-77580D744AD8@xxxxxxxxxxxxx>,
Gus@xxxxxxxxxxxxxxxxxxxxxxxxx says...
How security is accessing our mail over the internet (HTTP) with Outlook. I
set it up using the articles posting on the newsgroup but I'm a bit concern
with the security. I'm specifically concerned with the fact that one of the
articles had me set the security with basic authentication (sent as text). I
also know that the article also mentioned to set 128-bit encryption....does
this protection "overrides" the basic authentication?

Also, I guess since the server asks me for ID/password/domain should I
safely assume that I'm secure?

Just concerned...any feedback would be appreciated.
.



Relevant Pages

  • [NEWS] Transparent Cache Engine and Content Engine TCP Relay Vulnerability
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... The default configuration of the proxy ... The following Cisco Cache Engine and Content Engine products are affected ... of supported protocols such as FTP and HTTPS. ...
    (Securiteam)
  • Re: is HTTPS crackable
    ... (willing to question HTTPS protocal security prior to questioning ... OWA55/Kiosk security), not necessary Microsoft's strategy. ... > public Internet access by a kiosk, ... > about downloading and installing the self-signed certificate. ...
    (microsoft.public.inetserver.iis.security)
  • [fw-wiz] Help- Nat-t
    ... Security of HTTPS ... > Is there some possibility of a MITM attack? ... HTTPS relies on SSL / TLS. ...
    (Firewall-Wizards)
  • RE: SSL Reverse Proxy
    ... you could also use Squid in httpd accelerator mode. ... the communications between ISA and the backend servers are https ... > recognized corporate security certification track, ... This ALL INCLUSIVE curriculum utilizes lectures, case studies and true hands-on utilization ...
    (Security-Basics)
  • Re: Secure Sites "https" wont open.
    ... How to Troubleshoot Situations Where You Cannot Connect to Secure Web Sites ... Internet Explorer for handling user information in HTTP and in HTTPS URLs: ... How to make a good newsgroup post: ...
    (microsoft.public.windows.inetexplorer.ie6.browser)