RE: RPC over HTTP security

Using the ISA Server setup an Secure mail.domain.com and a
SMTPS.domain.com and issue certificates, if configured correctly the
users can even setup a imap client not on your network and use the SMTPS
for relaying messages. 

-----Original Message-----
From: LordInfidel@directionweb.com [mailto:LordInfidel@directionweb.com]

Sent: Thursday, January 27, 2005 9:33 AM
To: sf_mail_sbm@yahoo.com; security-basics@securityfocus.com
Subject: RE: RPC over HTTP security

http://office.microsoft.com/en-us/assistance/HA011402731033.aspx

~tips~
Make sure you use it over https and not http. (use self signed CA certs)
The client side needs to be outlook 2003, previous versions will not
work.

-----Original Message-----
From: sf_mail_sbm@yahoo.com [mailto:sf_mail_sbm@yahoo.com]
Sent: Wednesday, January 26, 2005 8:03 AM
To: security-basics@securityfocus.com
Subject: RPC over HTTP security



Hi List,
We are thinking about deploying RPC over HTTP to access email from the
Internet

Wanted to get some information on the technology and the security
implications of same

Not much info from Microsoft's site

any help would be greatly apreciated

Thanks,
Ronish