Help with Ironport outlook plugin and sending encrypted mail

[keithsauer507]

We use CRES to send encrypted mail and it normally goes out fine with adding something in the subject line or if Ironport is triggered on certain words or number patterns.

Well testing the Outlook plugin solely for the purpose of reporting spam (since we seem to be getting a lot of it lately), our CIO wants to test it to encrypt a message.  When he has encrypt message activated and goes to send the email, a dialog box comes up with his email address in and a password field.  It also says "Enter decryption password".  But he is sending an encrypted message, so why would it be asking for a decryption password?  Is this is CRES password?  

[Robert Sherwin · Accepted solution]

Yes - this is still the CRES password for his domain user email account tied to CRES.  The wording may be a little confusing - but, it will still encrypt and deliver through CRES as tied with his credentials while encrypting from his side.

-Robert

[keithsauer507]

Ok thank you.  Wasn't sure because prior to the plugin we just used words or tags in the subject, which obviously did not require a password to send an encrypted e-mail.  Therefore we were confused because we thought a password was required only to read an encrypted e-mail, not send one.

[David Miller]

You need to authenticate to encrypt to avoid spoofing.  Previous versions of the plug-in allowed you to send an encrypted email without authentication, relying on the token in the plugin, but that only authenticated the domain not the user.  So now you need to login to encrypt as well as decrypt.