Email Security

Authentication

Computing Services does not allow clear-text authentication to servers on campus. This means that any email client used with Computing Services' email servers MUST be configured to use an authentication method that provides encryption of the users' password.

Opening Attachments

To allow freedom to share files via email, Carnegie Mellon's mailservers are not configured to block or remove email containing attachments. Unfortunately, some file attachment types are commonly used to spread viruses (e.g., .vbs, .bat, .exe, .pif .scr). Because of the way some viruses harvest email addresses, an infected message may appear to come from someone you know, or may even show your name in the "From" line. Even if you know the sender, be extremely cautious about opening email attachments. Overall, to avoid problems, DO NOT open attachments unless you are expecting them. As a side-note, remember that Computing Services will NEVER send email with an attachment.

Last Updated: 11/21/11