Transport Layer Security (TLS) provides a secure communication channel
between hosts over the Internet, ensuring the privacy and integrity of the data during
transmission.
Two
hosts (the Deep Discovery Email
Inspector appliance
and the email relay) establish a TLS session as follows:
-
The sending host requests a secure connection with the receiving host by sending a cipher list.
-
The two hosts establish a connection.
-
The receiving host selects one cipher and replies with its digital certificate signed by a Certificate Authority (CA).
-
The sending host verifies the identity with the trusted CA certificate and generates the session keys by encrypting a message using a public key.
-
The receiving host decrypts the message using the corresponding private key.
-
The sending host's identity verifies when the receiving host can decrypt the message with the private key.
-
The TLS session establishes and email messages passed between the hosts are encrypted.
 |
TipBy default, Deep Discovery Email
Inspector does
not apply TLS or email encryption, nor does it verify email relay host identities.
Enable TLS for Deep Discovery Email
Inspector to
encrypt incoming email messages.
|