By now in my personal opinion using web-based mail with
IE is more secure than using OUTLOOK or Outlook Express.
Although we can use outlook or OE to send and receive
secure email with digital signature, there is potential
insecurity after I download my emails to my computer--
that is my computer could be hacked.... But when I use
web-based email, I can hardly send encrypted email to
others...
What a headache.

Re: security concerns about email with digital certificate by Miha

Miha
Fri Sep 17 08:35:49 CDT 2004

Hi,

You can use Outlook and other e-mail clients in secure way. You have to take
care of security on your computer (e.g. not run Kazaa and other peer to peer
applications on same computer that you use to write your confidential
documents and e-mails or use on-line bank service on).
Personally I have certificates for such purposes (on-line banking, secure
e-mail,...) stored on smart card. It does provide additional security --
while still not 100% secure, but close enough.

To protect your digital certificates, you must use:
a) secure OS (e.g. Windows 2000, Windows XP) with latest patches, antivirus,
personal firewall, etc...
b) strong - hard to guess password (password that has more then 14
characters)

If you don't use smart card for certificate storage, your password is the
one that is protecting your profile where your certificates are stored. If I
can guess your password easily then I can get to your certificates and use
them in your name...

Also OWA -- Exchange 2003 web mail client will also allow you to encrypt and
read encrypted e-mails using web mail client.

Mike

"digital" <anonymous@discussions.microsoft.com> wrote in message
news:233a01c49cb8$aba0bc90$a401280a@phx.gbl...
> By now in my personal opinion using web-based mail with
> IE is more secure than using OUTLOOK or Outlook Express.
> Although we can use outlook or OE to send and receive
> secure email with digital signature, there is potential
> insecurity after I download my emails to my computer--
> that is my computer could be hacked.... But when I use
> web-based email, I can hardly send encrypted email to
> others...
> What a headache.



Re: security concerns about email with digital certificate by Robert

Robert
Sat Sep 18 18:00:17 CDT 2004

digital wrote:
> By now in my personal opinion using web-based mail with
> IE is more secure than using OUTLOOK or Outlook Express.
> Although we can use outlook or OE to send and receive
> secure email with digital signature, there is potential
> insecurity after I download my emails to my computer--
> that is my computer could be hacked.... But when I use
> web-based email, I can hardly send encrypted email to
> others...

This assumes that your computer is untrustworthy (for the insecurity of
local mail) and that the computer running the webmail system is completely
trustworthy, as is the channel between you and it, and that your local
workstation which was untrustworthy a moment ago for local mail is suddenly
trustworthy while you're doing webmail.

I can't help thinking thats a bit of a reach.