gpg solution for Windows and Exchange

shelby · 09-21-2004, 10:17 AM

Our organization uses Outlook 2000, Outlook Web Access (OWA) and Exchange 2000 for email (about 5,000 users). My boss wants to look into email encrption but we cannot spend a whole lot of money. I was wondering if there was something that anyone can recommend. I also manage about 15 Linux servers so I am not afraid of the GNU route. I have seen GPG but nothing easy to deploy to our user base. I would also like to host a key server for our users so we can manage thier keys. Any suggestions? Thanks

r0b0 · 09-22-2004, 08:54 AM

Since this is not a Outlook/Exchange forum, only a little bit of theory: GPG or PGP are end-to-end encryption solutions. This means that encrypting and decrypting takes place in clients' MUA (Outlook in your case). And all keys used are per-user (e.g. bound to e-mail addresses).
If you want to use some kind of transport level encryption, consider using TLS in SMTP.

stickman · 09-22-2004, 01:14 PM

You could use something like WinPT on the Windows systems to assist with signing and encryption. I believe that there are also a couple O/OE plugins for this. I've got a few listed on my site, but it's been a while since I've tested them. If using O/OE is not a requirement, you could use a client that better supports GPG/PGP. The difficulty you'll find is key management. There are several decent key servers available.