Fwd: Re: [MAGNet] CalMail and secure info

From: Karen Eft <kareneft_at_berkeley.edu>
Date: Sat May 27 2006 - 11:10:21 PDT

F.Y.I.
Yes, my office is following up on this.
-K.E.

Begin forwarded message:

> From: Bernie Rossi <rossi@berkeley.edu>
> Date: May 26, 2006 2:05:12 PM PDT
> To: Michael Rimar <mrmr@berkeley.edu>, micronet-
> list@uclink.berkeley.edu, magnet-list@lists.berkeley.edu,
> consult@berkeley.edu
> Cc: hrweb@berkeley.edu, camillen@uclink.berkeley.edu,
> terric@uclin4.berkeley.edu
> Subject: [Micronet] Re: [MAGNet] CalMail and secure info
>
> Hi Michael,
>
> There are two aspects to this question, the technical and the policy.
>
> As for the technical side, if the message is sent from CalMail to
> CalMail, then the transport would be secure. Once on CalMail, it
> is stored in plain text, which if hacked could be vulnerable. This
> is true with any email system. As far as I can see, they are not
> using any encryption on these messages.
>
> If the message is sent from outside CalMail, then it is subject to
> the vagrancies of the network and anything could happen prior to it
> getting to us.
>
> Then, of course, as Aron just reminded me, if the person sending
> the message is keeping copies of their outgoing mail, there is the
> issue of the social security number being stored on their computer.
>
> As for the policy side, that is for the IT Policy Office to respond
> to. I have forwarded your message to them, they will respond
> accordingly.
>
> Thanks,
>
> Bernie Rossi
> CalMail Consulting
>
>
> At 1:34 PM -0700 5/26/06, Michael Rimar wrote:
>> Hello
>>
>> I was surprised to see this suggestion on the HR website:
>> 1. When hiring an employee who claims to have already cleared
>> a campus criminal background check, how can departments accurately
>> verify a previous fingerprint session?
>> 2. To find out if an individual has already had a criminal
>> background check, departments can send the UC Police Department
>> the full name, date of birth, and social security number of the
>> individual in question to: camillen@uclink.berkeley.edu or
>> terric@uclin4.berkeley.edu
>> I've always followed the proscription against emailing such info.
>> Is Calmail's use of secured connections sufficient to make this
>> not an issue?
>>
>> Thanks, Michael
>> ------------------------------
>> Michael Rimar
>> Administrative Assistant
>> UC Botanical Garden
>> 200 Centennial Drive #5045
>> Berkeley, CA 94720-5045
>> 510-642-0849
>> fax 510-642-3012
>> http://botanicalgarden.berkeley.edu
>
>

------------------------------------------------------------------------
The following was automatically added to this message by the list server:

For information about Micronet, including subscribing to
or unsubscribing from its mailing list and finding out
about upcoming meetings, please visit the Micronet Web site:
<http://micronet.berkeley.edu/>.
Received on Sat May 27 11:15:34 2006

This archive was generated by hypermail 2.1.8 : Sat May 27 2006 - 11:15:36 PDT