CRES registration process

[tsilveruits]

The CRES Account Administration Guide doesn't go into a lot of detail about the "Enabling Sender Registration" feature. Typically, a user must receive a CRES-encrypted envelope in order to register. This feature seems to negate having to receive an encrypted envelope from CRES. Instead, are all senders subject to this (i.e., all traffic through the IronPorts), or is it applicable only to senders who initiate an email that is intended to be CRES-encrypted (i.e., only emails that meet the DLP/CRES policies)? 

Thanks,

Tim

"You can configure the system to automatically offer to register senders on a per-account basis. This is also useful if you would like to offer CRES accounts to your email senders who do not currently use CRES to send encrypted mail. Once registered, senders can learn more about the options available to them for controlling their encrypted messages.

If you enable this feature, senders receive email messages inviting them to create an account on the CRES server. They receive these invitations once every 30 days, and they can opt out easily by following the instructions included in the invitation. You cannot change the frequency of invitations."

[Ken Stieers]

The way I read that, only users who send mail that gets encrypted with CRES get added to the list of users that get a mail to register...  How else would CRES know that they exist?

So if you never send an encrypted mail, you never get a message saying "hey, register..."

[tsilveruits]

That makes sense to me, too. My concern is that internal mail that is delivered to our IronPort ESAs would be subjected to this policy, not just those users who are sending messages matching the criteria for CRES-encrypted envelopes.

[tsilveruits]

Testing has verified that senders who are not registered with CRES who send an email that is CRES-encrypted, are sent the registration email described in this feature. Normal email is not affected.

Tim

[tsilveruits]

"They receive these invitations once every 30 days..."

Does this mean an unregistered user receives a reminder to register every 30 days, or is this the maximum; one message every 30 days?

I send a CRES-encrypted email 2 days from now 

I send a CRES-encrypted email 28 days from now

30 days from now, I DO NOT send a CRES-encrypted email, but notification to register issued?

OR...

I send a CRES-encrypted email 32 days from now - Receive CRES registration notification again

[tsilveruits]

Can someone answer the question about the 30 day notification?