Security Assessment

%3CLINGO-SUB%20id%3D%22lingo-sub-34744%22%20slang%3D%22en-US%22%3ESecurity%20Assessment%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-34744%22%20slang%3D%22en-US%22%3E%3CP%3EI%20am%20working%20on%20a%20Security%20Assessment%20and%20to%20find%20answers%20the%20fowling%20questions.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CUL%3E%3CLI%3EDoes%20Microsoft%20have%20access%20to%20message%20transcripts%2Flogs%3F%3C%2FLI%3E%3CLI%3EAre%20connections%20decrypted%20and%20re-encrypted%20in%20transit%3F%3C%2FLI%3E%3CLI%3EIs%20there%20an%20option%20for%20end-to-end%20encryption%3F%3C%2FLI%3E%3C%2FUL%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-34744%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ESkype%20for%20Business%20Adoption%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-35020%22%20slang%3D%22en-US%22%3ERe%3A%20Security%20Assessment%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-35020%22%20slang%3D%22en-US%22%3E%3CP%3E%3CFONT%20color%3D%22%23000000%22%20face%3D%22Calibri%22%3EHello%20Matt%2C%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%3CFONT%20color%3D%22%23000000%22%20face%3D%22Calibri%22%3EHere%20is%20answer%2C%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%3CFONT%20color%3D%22%23000000%22%20face%3D%22Calibri%22%3E%E2%80%A2Does%20Microsoft%20have%20access%20to%20message%20transcripts%2Flogs%3F%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%3CFONT%20color%3D%22%23000000%22%20face%3D%22Calibri%22%3E-%26gt%3B%20I%20think%20Microsoft%20doesn%E2%80%99t%20have%20access%20to%20messages%2C%20they%20do%20not%20have%20access%20to%20customer%20tenant%20database%20were%20messages%20archives%20in%20exchange%20mailbox.%20%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%3CFONT%20color%3D%22%23000000%22%20face%3D%22Calibri%22%3E%E2%80%A2Are%20connections%20decrypted%20and%20re-encrypted%20in%20transit%3F%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%3CFONT%20color%3D%22%23000000%22%20face%3D%22Calibri%22%3EI%20think.%20No.%20%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%3CFONT%20color%3D%22%23000000%22%20face%3D%22Calibri%22%3E%E2%80%A2Is%20there%20an%20option%20for%20end-to-end%20encryption%3F%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%3CFONT%20color%3D%22%23000000%22%20face%3D%22Calibri%22%3EYes%2C%20all%20Skype%20for%20Business%2FLync%20communication%20by%20default%20encrypted.%20%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%3CFONT%20color%3D%22%23000000%22%20face%3D%22Calibri%22%3ESignaling%20information%20uses%20TLS%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%3CFONT%20color%3D%22%23000000%22%20face%3D%22Calibri%22%3EMedia%20uses%20SRTP.%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%3CFONT%20color%3D%22%23000000%22%20face%3D%22Calibri%22%3E*Anyone%20from%20Microsoft%20can%20correct%20me%2C%20if%20i%20am%20wrong.%20%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

I am working on a Security Assessment and to find answers the fowling questions.

 

  • Does Microsoft have access to message transcripts/logs?
  • Are connections decrypted and re-encrypted in transit?
  • Is there an option for end-to-end encryption?
1 Reply

Hello Matt,

Here is answer,

•Does Microsoft have access to message transcripts/logs?

-> I think Microsoft doesn’t have access to messages, they do not have access to customer tenant database were messages archives in exchange mailbox.

•Are connections decrypted and re-encrypted in transit?

I think. No.

•Is there an option for end-to-end encryption?

Yes, all Skype for Business/Lync communication by default encrypted.

Signaling information uses TLS

Media uses SRTP.

*Anyone from Microsoft can correct me, if i am wrong.