Notes local mail file encryption/decryption

My organization is currently putting in place the R6 architecture for
global deployment and our security team posed a question to us.
Specifically, they want to know if there is any way to decrypt the
local mail database of a Notes user if they choose to encrypt it, and
how specifically is the local mail file encrypted (where is the key
used taken from?) If there is anything we can do architecture-wise to
assist pre-rollout from a settings perspective to facilitate this it
would be fantastic. Thanks in advance!

Regards,

M. Hinczynski

Local databases are encrypted with the users ID file, and the ID file (and
password, of course) is necessary to decrypt it.

Tim Mohrlänt - tmohrlant-at-NO_JUNK_MAIL_attbi.com
(remove NO_JUNK_MAIL_)


"ZeroCool" wrote in message
news:549b802b.0306260631.31966edd-at-posting.google.c om...
> My organization is currently putting in place the R6 architecture for
> global deployment and our security team posed a question to us.
> Specifically, they want to know if there is any way to decrypt the
> local mail database of a Notes user if they choose to encrypt it, and
> how specifically is the local mail file encrypted (where is the key
> used taken from?) If there is anything we can do architecture-wise to
> assist pre-rollout from a settings perspective to facilitate this it
> would be fantastic. Thanks in advance!
>
> Regards,
>
> M. Hinczynski

On 26 Jun 2003 07:31:16 -0700, hinczynski-at-yahoo.com (ZeroCool) wrote:

>My organization is currently putting in place the R6 architecture for
>global deployment and our security team posed a question to us.
>Specifically, they want to know if there is any way to decrypt the
>local mail database of a Notes user if they choose to encrypt it, and
>how specifically is the local mail file encrypted (where is the key
>used taken from?) If there is anything we can do architecture-wise to
>assist pre-rollout from a settings perspective to facilitate this it
>would be fantastic. Thanks in advance!

Notes has a couple of methods of encrypting things, but all are
dependant on the User's ID file. If you want to get seriously into
encryption, then make sure that you implement password recovery in
your ID's