CertiGuide to Security+  9  Chapter 2:  Communication Security (Domain 2.0; 20%)       9  2.2  Email

2.2.2  PGP 1 Message Privacy

Data privacy is a major issue in email, as with many other types of network communication. It isn’t enough to ensure that your data is encrypted during transport and storage – rather, you should also ensure it is encrypted with a strong algorithm. See this footnote¹⁶⁸ for a Windows screen saver that attempts to brute-force with S/MIME 40-bit RC2 keys, which are considered a weak encryption mechanism, if your goal is more than casual protection from prying eyes. Sometimes casual protection is enough, but often business requirements demand more security. Your organization would be advised to develop a policy for email security, specifying to users which levels of encryption, if any, are to be used for which types of communication, how long email is retained, who is permitted access to it, etc.

2.2.2  PGP 1 Message Privacy