We have just completed a long series of articles discussing how attackers forge email messages and what technologies and techniques can be used to counter these attacks. See: Email Identity and Forged Email.
In this post, we will discuss some best practices when using LuxSci to maximize your protection against forged email messages.
Read the rest of this post »
To learn about the new WebMail Composer and our ongoing plans for enhancing the LuxSci web interface, see The Beginning of the New Luxsci Interface. In this document, we answer common questions about the new composer; in particular, shedding light on things that are different to help acquaint you with the changes.
Read the rest of this post »
LuxSci has been approached by many people asking for VPN (Virtual Private Network) services. When we ask them why, they indicate that they use wireless hotspots (like at Starbucks and other public places) that are insecure and untrusted and they want to be sure that their email is secure and encrypted there.*
Note that even if the hotspot is password protected and “secure”, that does not mean that it is “trusted”. The hot stop administrators or other users of that hotspot could still try to intercept your Internet traffic. So, just because it is a “secure” hotspot with the little lock next to it and a password that you must enter, do not assume you are safe at all.
Read the rest of this post »
You thought email was a simple concept, but you are at once confronted with a plethora of acronyms and jargon like POP, IMAP, WebMail, Aliases, Forwards, SMTP, IMAP, POP, Quota, SPAM, TLS, SSL, Archival, and more! This article describes the ins and outs of email, explains these terms, and helps you figure out what services and features you need from your personal or business email service provider.
Read the rest of this post »
Email and other data are either being “transmitted” or “processed” or are “at rest.” I.e., it is moving from one computer to another, stored/at rest on a computer, or preparing to be transmitted or stored.
While most types of compliance regulation, such as HIPAA, specifically require that data be transmitted securely, not all regulations require that data be stored in an encrypted form while at rest. I.e., HIPAA does not require at-rest encryption, though it is recommended to decrease risk and potential liability in some situations.
Having your email and other data encrypted while at rest can potentially increase the security of that data, even if that level of security is not explicitly required. As a result, many LuxSci customers have asked how to ensure that all of their email and other data are encrypted while at rest.
Read the rest of this post »
