|
SSL FAQs
What is SSL? Secure Socket Layer (SSL) refers to the standard method for encryption and authentication on the Internet. This added security provides you with protection against having your password stolen on an insecure connection. -or- Secure Sockets Layer (SSL)
is a secure communication method that uses a certificate (private key)
to encrypt (scramble) text before it flows across a network, and then
its decrypted (un-scrambled) at its destination. A certificate is installed
on the server to produce the private connection. SSL is most commonly
recognized on web servers, as it's "visible" through the closed
lock or solid key symbol in the browser window, or through a web address
starting with "https:" The SSL protocol is not limited to use
on web servers, however. It can also be used to secure other types of
communication such as email. SSL ensures that the person is not pretending to be someone who has been granted restricted access. Another feature of SSL technology is the ability to authenticate data so that an interceder cannot substitute another transmission for the actual transmission without being detected Why are you requiring everyone to use SSL? SSL encrypts network traffic. Without this, network traffic can be intercepted and read by programs available on the internet. The biggest danger here is that the afore mentioned traffic includes your username and password every time you check mail using an email client, or log into a computer using ftp or telnet. Increasingly, your personal email communications are not as private as you might believe. Employers, high-tech criminals, spammers, ISPs, governments, surveillance agencies and identity thieves are just a few of the people who might routinely be intercepting and reading your email without your consent or knowledge. You lock your house not only to protect the valuables in it, but also because you value privacy itself. You need to protect your personal communications for the same reason. You need to
enable SSL encryption on the email clients on all the computers you use
to access GMU email. If you don’t
make this change, you will not be able to access your GMU email account
after The only conclusive way to tell that SSL is enabled is to find your application in the instructions provided and follow the steps to check. Most clients released since 1999 support SSL. The ITU has listed the clients that we know support SSL on the front of this website. It depends on if you use the same client for both GMU and non GMU email. If you use one email client for GMU email and another for other email, then you will make the changes only to the one that you use for your GMU email. The ITU recommends that you enable SSL encryption for all email clients to secure all your email accounts. However, many ISPs either do not support SSL or use other methods for security. When you make the change following the directions provided, a port number on the configuration page should change from 143 to 993. Some clients will also display a padlock or other icon much like what is displayed when you visit a secure website using https. If you need
help making the changes, please contact the This change will have no effect on you if you use a departmentally provided e-mail system. The ITU does recommend that all departments provide SSL support in their –email system. Follow the directions given on the instructions website for your email client. If the boxes that the directions ask you to check are already checked, your email client is already setup for SSL encryption. No further changes are needed on that computer. If you don’t enable SSL on an email account you use to connect to GMU, you will not be able to connect to the mail server after June 1st. Mail sent to your account will still be delivered and you will have access to it once you have enabled SSL. Windows
To determine what version of Windows you have:
Macintosh
To determine your Operating System software version:
How do I tell which email client and version I’m using? What
do I do if I’m using an older version of an email client than the one
listed? Older versions of the email packages listed on the instructions website may not be able to use SSL encryption. If they aren’t, you will have to upgrade your email client to a newer version that does. No. The changes made to enable SSL encryption are made on the actual computer itself, rather than on a central server. This means that you have to make the changes on all computers that you use to access GMU email. The changes made to enable SSL encryption are made on the actual computer itself, rather than on a central server. This means that you have to make the changes on all computers that you use to access GMU email. No.
SSL only encrypts email traffic between your computer and
the email server. It doesn’t provide any virus or spyware protection.
You will still need to keep your virus and spyware protection
up to date to provide security for your computer.
You can download Symantec Anti-Virus software and get more
information about security measures you can take on the There is, at this time, no University standard for sending and receiving mail in a fully encrypted form where ther sender supplies a key that the recipient uses to view the mesage. Some departments that have a need to exchange very sensitive information have implemented local solutions using Mason's email system. |
|
 |
