SSL Certs & Hosted Email

M

mrmrrza

Well-Known Member
Joined
Sep 1, 2010
Messages
211
Reaction score
9
Location
SA
Hi everyone,

I have a question regarding hosted email platforms, as offered by most ISPs in SA, for small businesses.

Most SME's that host their mail (common these days) dont make use of SSL/TLS, as corporate mail servers do, is this an oversight or not?
What are the risks and is it worth the R500+ per year for a cert?

I know that this only protects the connection between client software (outlook...) and the mail server, and from the mail server to the recipient it is unencrypted, but with the increased use of WiFi and WiFi hotspots surely there is a risk, but I suppose it all boils down to how valuable the information that is transmitted is?

Maybe someone in the know can shed some light for me.
 
Last edited:
With more companies using offerings from companies like Google, the need to host your own mail server is falling away. You can also self sign your certificates so no need to purchase one if you really are bothered with cost.

Also the email is only secure through the entire chain when both sender & receiver make use of a SSL/TLS.
 
Should've said had their mail hosted by ISP. OK. Not a google fan, but mweb, webafrica etc... dont offer SSL without you asking for it.

But surely even without the recipient's mail server having a cert, it protects the packets from spoofing within a hotspot?
 
Last edited:
Well if its a hosted solution then its the cost of doing business and any company that ignores any security issues is looking for trouble. You may not be a fan of Google but more and more companies are seeing the value of using Google & co so they can get on with their core business and not worry about email admin (our company made this decision years ago and was the best move ever)
 
cbrunsdonza said:
Well if its a hosted solution then its the cost of doing business and any company that ignores any security issues is looking for trouble. You may not be a fan of Google but more and more companies are seeing the value of using Google & co so they can get on with their core business and not worry about email admin (our company made this decision years ago and was the best move ever)
Click to expand...

You're talking about google apps right, learn new thiings everyday?
 
Ya dont even try and explain to mom+pop users what winrar is!

That now throws a spanner in the works,,, I tend to be a conspiracy theorist when it comes to google, but maybe this is worth looking at, hows the spam filter - because WA is awesome?

Lets not get off topic, any one else want to share a view on spoofing and hotspot security?
 
mrmrrza said:
Hi everyone,

I have a question regarding hosted email platforms, as offered by most ISPs in SA, for small businesses.

Most SME's that host their mail (common these days) dont make use of SSL/TLS, as corporate mail servers do, is this an oversight or not?
What are the risks and is it worth the R500+ per year for a cert?

I know that this only protects the connection between client software (outlook...) and the mail server, and from the mail server to the recipient it is unencrypted, but with the increased use of WiFi and WiFi hotspots surely there is a risk, but I suppose it all boils down to how valuable the information that is transmitted is?

Maybe someone in the know can shed some light for me.
Click to expand...

It's not only about the content of the emails, but also the credentials used to send and receive them. Lose your email credentials, lose your digital life, in many cases.

Facebook? Recover your creds by sending an email. Google Apps? Same. Your hosting provider? Same. Your Domain name? Same. etc, etc, etc.

So, it is certainly a good idea to protect the channel between your PC and the mail server, using TLS.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X