Benefits of Encryption Policy Management
Here's are some of the considerations you should take into account as part of your email policy:

• Only authorized users can send and receive encrypted email;

• Messages using algorithms, keys and certificates that are not recognized will be blocked;

• Organizations can choose how they secure messages and enforce encryption usage for particular users and messages.

Features in a Standards-based Strategy
When designing your encryption strategy, don't forget the important standards:

• Encryption based on S/MIME, the de facto standard for encrypted email;

• Triple DES encryption;

• X.509 version 3 certificate support.

Conclusion
Encryption is, to quote Winston Churchill, "a riddle wrapped in a mystery, inside an enigma." [By contrast, a burrito is meat or chicken, covered in cheese and hot sauce, wrapped in a flour tortilla. -- DG] The technology itself is based on arcane mathematical formulae, the policies are convoluted with legal and political overtones, and there are as many opinions as there are articles written on the subject. The need for encryption is great, and it will only become greater as the Internet itself becomes "mission critical."

My recommendation is to carefully construct your encryption policy, stick with open standards, and develop an encryption strategy that includes content security. Encryption may secure the privacy of data, but your company will be liable for the contents if inappropriate language is involved. It is equally unpleasant to have malicious code or a virus introduced to your network via an encrypted email that could not be examined for threatening content.

Finally, you don't want proprietary information leaving your organization in an encrypted email. Encryption may be a bit of a riddle, but it could be very important to your company.

Victor Woodward is vice-president of Content Technologies, Inc., a content security company in Kirkland, WA. His web address is http://www.mimesweeper.com, and you can reach him by email at victor@us.mimesweeper.com.