Outlook e-mail encryption "security": 3DES and SHA1.

Question

Does anyone know why these very outdated security algorithms are the only available ones in Outlook 365? This does not really seem that secure to me, considering both algorithms are very old and considered weak or patchy at best by now.

And RC2 should flat out be removed, it's from 1987!
It's worse than plain text because it makes people may think their messages are secure, but they aren't.

mderooij · Answer

Cipher support depends on the operating system used and which is agreed upon by both ends. My current connection uses TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384. Support for older versions of TLS (&lt;1.2) will be dropped in October - see https://support.microsoft.com/en-us/help/4057306/preparing-for-tls-1-2-in-office-365

safvan am · Answer

Hello Michel,Thanks for the reply , So is it means while using the Encryption TLS 1.2 can Change/Support the outlook&nbsp;Encryption Algorithm other than 3DES and RC2 (which is currently using)Attached SS.&nbsp;

nestori syynimaa · Answer

safvan am, why not use Office 365 Message Encryption instead of S/MIME? Check this for setup instructions.

deleted · Answer

Seems to have changed since a recent update? I was able to use SHA2 (and 3) and AES for a very long time. Since today, they are gone and only older protocols are supported.

chris_aguilera · Answer

Are you using a moder Outlook version? Outlook 2013/2016 and for O365 supports AES 256.

Forum Discussion

Outlook e-mail encryption "security": 3DES and SHA1.

Share

Resources