CyberSecure Technologies - http://www.cybersecuretech.com/articlelive
Small Steps to Protect Your Email: Making Secure Connections
http://www.cybersecuretech.com/articlelive/articles/14/1/Small-Steps-to-Protect-Your-Email-Making-Secure-Connections/Page1.html
By CST Staff
Published on 06/17/2008
 
Regardless of whether you use an email application such as Outlook or Mail, or if you simply point your browser to Gmail or Yahoo to check your email, you should always make sure that you are using a secure connection. Secure connections enable you to ensure the authenticity of the mail server you are using so that you can rest assured that your email is being sent to your mail sever and not a malicious third party. Making sure you are using a secure connection is one small step which you can take to safeguard your important business communications from prying eyes.


Making Secure Connections

CyberSecure Technologies is a company dedicated to offering our clients the best in innovative IT and network support solutions. As part of that commitment, we strive to keep you informed of steps which you can take to ensure the security of your business computing and communications. In this spirit, we offer this series of brief articles written in plain language that will detail some of the small steps which you can take to keep your business communications safe.

    Regardless of whether you use an email application such as Outlook or Mail, or if you simply point your browser to Gmail or Yahoo to check your email, you should always make sure that you are using a secure connection. A secure connection between your computer and your mail server is one in which your computer is able to recognize that the mail server it is communicating with is indeed the intended server. This connection is verified by use of certificates which a website obtains from a certificate authority as a means of being able to certify to your computer that they are who they say they are. These identity certificates are certified by a certification authority which acts like a digital notary, notarizing the IDs of websites. Your browser or email application can recognize these certificates and can then make a secure connection. You can be confident with these secure connections that you are dealing with the website or mail server you intend to rather than a malicious look-alike.

    When checking your email by web mail and using a web browser, you can tell if the connection you’ve established is secure by noting whether or not the web address includes the ‘https://’ instead of the unsecured ‘http://’ protocol. However, the more secure way to access your email is by using a dedicated mail client. Mail clients such as Mozilla’s Thunderbird and Microsoft’s Outlook have become ubiquitous in computing because of the ease and security they afford users in downloading, reviewing, and sending email. These dedicated email clients make use of Post Office Protocol (POP) or Internet Message Access Protocol (IMAP) in order to retrieve email over your Internet connection from a remote server and interact with that server. Certain email clients such as Thunderbird, allow users to enable SSL (Secure Sockets Layer) or TLS (Transport Layer Security) when configuring the POP or IMAP connection, providing an added layer of security in directly connecting to your email.

    Unfortunately, ensuring security in sending and receiving email does not stop there. Simply establishing a secure connection between you and your email does not actually make the emails you send anymore secure once they leave your mail server. Ensuring a secure connection increases your overall email security because it acts as a check against efforts by third parties to misdirect your email access or scam you into submitting private and valuable information to the wrong parties during the first leg of your message’s trip. However, to further ensure your security when relating private and valuable information over email, it may be worthwhile to employ further security measures. These further email security measures might include making use of public key encryption and making sure you are using a secure email provider, as well as practicing safer email behavior. In the next article, we’ll show you how training yourself to be a more security-minded email user can increase the security of your most valuable and private emails.