Forum Discussion

Chase Beydler1's avatar
Chase Beydler1
New Member
11 years ago

TLS encryption for emails

Anyone else realize that the emails that come out of Service Desk are not being sent with any type of TLS encryption support? We just realized that all data in emails are not encrypted when they come out of the GTA mail server.

This is a dead simple thing to fix and we cannot believe that such a corporate service would not have any type of mail encryption.

Anyone have any thoughts on this?
  • This was a response I received about this back on April 2nd:
    "I hope you are doing well. Our Engineering team advised me that the feature you requested has been approved, is currently on the product roadmap, and will be included in the upcoming releases within the month. Thanks for your continued patience."

    I then received this response at the end of August:
    "Next week, our Q4 starts. I will contact Operations/Service Desk Engineering to see where we are on this as they had proposed it would be likely available during this time period."

    We'll see if this ever happens. It is a major security flaw and I'm actually surprised their auditors let this continue.
  • Bcshay's avatar
    Bcshay
    Active Contributor
    I cannot believe I am now just looking for this topic. Today I was just thinking "wait these emails coming from the service desk are sent in plain text, and the emails sent back to it from Customers are as well". User Object passwords etc are sometimes in the Incident. This is a major security risk.

    Have you guys addressed this? Why not allow us to use our own Exchange mailbox for this using IMAPS/TLS and SMTP/TLS beween your mail servers. I'm not the expert but other service desk services have this functionality.

    Can you please provide Chase and I an update on this.

    The workaround I have is Users must check the "hide from customer" option when including any passwords in an incident.
  • Luke Grimstrup's avatar
    Luke Grimstrup
    Retired GoTo Contributor
    Hi Chase,

    Our Ops guys are currently assessing the impact this may have on other products. Once they've made this change, I'll update this thread.

    Thanks,
    Luke
  • Luke,
    Any update about this? Really should be an easy mail server switch change.

    Thanks
  • Luke Grimstrup's avatar
    Luke Grimstrup
    Retired GoTo Contributor
    Hi Chase,

    We're currently looking into this, you're right we should be sending emails using TLS.

    I'll keep this thread updated as we make progress :)

    Luke