Default Time for Expiring Message in CRES

[jkirkland146]

Is there a default amount of time before a message expires in CRES or is this only done manually?

[Jernej Vodopivec · Accepted solution]

By default there is no expiration time.

You can add expiration time/date by inserting field X-PostX-ExpirationDate into the message header.

Example: if you want the message to expire in 1 day you should set the value to +24:00:00.

[jkirkland146]

I found it in the ESA User Guide.

Inserting Encryption Headers into Messages

In adding this header, would it insert into all outgoing mail but only affect the encrypted emails?

[Jernej Vodopivec]

You can insert custom header values into email messages with "Mail Policies" -> "Outgoing Content Filters".

"Conditions" - create new outgoing content filter policy and set condition in such way that it will include all messages for which you want to set custom expiration date.

"Actions" - create new Action:

- Add/Edit Header

- Header Name: X-PostX-ExpirationDate

-  Value: +24:00:00

Then you can link this new filter to outgoing mail policy.

You probably have already defined outgoing mail policy for email encryption and you can just add another action to it so the whole process would be very simple.

[Ken Stieers]

How are you currently deciding to push an email through CRES?  If its a content filter, you can add another action before the "encrypt and send" action that adds the appropriate header.  That way it will only be on the ones that need it.

[Robert Sherwin]

By default – all encrypted messages have a 10 year expiration.  In order to work around that – you will need to incorporate the following content filter, or use a message filter.  

This can be accomplished by adding a custom header into the outbound mail prior to encryption.

To configure a message so that it expires 24 hours after you send it, insert the following header into the message:

X-PostX-ExpirationDate: +24:00:00

-Robert

[Jernej Vodopivec]

Thanks Robert for this correction.

The ESA User Manual says there is no expiration date by default. I agree 10 years is almost like no expiration date but - maybe you could talk with your colleagues to correct this info in the user manual? Just is case that some specific company won't misinterpret it in theirs strict company policy.