Windows 10: New Gmail email security with TLS by default and other new features

Brink · Apr 2, 2020

Whatâs changing

Recently, the Google Security blog outlined how the usage of Transport Layer Security (TLS) has grown to more than 96% of all traffic seen by a Chrome browser on Chrome OS. The blog post also highlighted a significant goal: to enable TLS by default for our Google products and services, and to ensure that TLS works out of the box.

Gmail already supports TLS, so that if the Simple Mail Transfer Protocol (SMTP) mail connection can be secured through TLS, it will be. However, in order to encourage more organizations to increase their email security posture, and to further the above goal of enabling TLS by default, weâve made the following changes:

TLS for mail connections will now be enabled by default

Admins are now able to test their SMTP outbound routesâ TLS configuration in the Admin console before deployment. They no longer need to wait for messages to bounce.

While admins have always had the ability to require TLS encryption for mail routes, it was previously off by default. Note that existing mail routes will not be impacted by these changes.

Whoâs impacted

Admins

Why itâs important

We always recommend that admins enable existing mail security features, including SPF, DKIM, and DMARC, to help protect end users. We also recommend that admins turn on MTA Strict Transport Security (MTA-STS), which improves Gmail security by requiring authentication checks and encryption for email sent to their domains. Enabling TLS by default on new SMTP mail routes enhances the security posture of our customers while enabling admins to test connections before enforcing TLS on existing routes makes it easier for them to deploy best practice security policies.

This change will not impact mail routes that were previously created.

Additional details

TLS enabled by default on new mail routes

With TLS enabled by default for new mail routes, all certificate validation requirements are also enabled by default. This ensures that recipient hosts have a certificate issued for the correct host that has been signed by a trusted Certificate Authority (CA). See more details about how weâre changing the requirements for trusted CAs below.

Admins will still have the ability to customize their TLS security settings on newly created mail routes. For example, if mail is forwarded to third-party or on-premise mail servers using internal CA certificates, admins may need to disable CA certificate validation. Disabling CA certificate validation, or even disabling TLS entirely, is not recommended. We encourage admins to test their SMTP TLS configuration in the Admin console in order to validate the TLS connection to external mail servers before disabling any recommended validations. See more details about how to test TLS connections in the Admin console.

Certificate Authority distrust in Gmail

In the past, the Google Security Blog has highlighted instances where Chrome would no longer trust root CA certificates used to intercept traffic on the public internet and where Chrome distrusts specific CAs.

If these scenarios occur in the future, these certificates will also be distrusted by Gmail. When this happens, mail sent using routes that require TLS with CA-signed certificate enforcement may bounce if the CA is no longer trusted. Although the list of root certificates trusted by Gmail can be retrieved from the Google Trust Services repository, we encourage admins to use the Test TLS Connections feature in the Admin console to confirm whether certificates have been distrusted.

Test TLS connections in Admin console

Admins can now use the new Test TLS Connection feature to verify whether a mail route can successfully establish a TLS connection with full validation to any destination, such as an on-premise mail server or a third-party mail relay, before enforcing TLS for that destination.

Getting started

Admins:

TLS settings

TLS will be ON by default for all new mail routes. We recommend that admins review all of their existing routes and enable all recommended TLS security options for these routes as well.

Testing TLS connections

Admins who want to require a secure TLS connection for emails can now verify that the connection to the recipient's mail server is valid simply by clicking on the âTest TLS Connectionâ button in the Admin console; they no longer need to wait for emails to bounce.

Learn more about requiring mail to be transmitted via a secure (TLS) connection and adding mail routes in the Help Center.

All certificate validations are now enabled by default when creating a new TLS compliance setting.

TLS and all certificate validations are now enabled by default when creating a new mail route.

End users: There are no end user settings for these features.

Rollout pace

Rapid and Scheduled Release domains: Extended rollout (potentially longer than 15 days for feature visibility) starting on April 2, 2020

Availability

Available to all G Suite customers

Click to expand...

Source: https://gsuiteupdates.googleblog.com...-with-TLS.html

:)

dalchina · Apr 2, 2020

new email

Outlook - Freeserve mail setup | Email settings

Freeserve settings

What Are the Gmail SMTP Server Settings?
Gmail SMTP
Gmail POP3 Settings

Gmail POP server address: pop.gmail.com

Gmail POP user name: Your full Gmail address (L: [email protected], for example)

Gmail POP password: Your Gmail password

If you have enabled Gmail 2-step authentication, use an application-specific Gmail password.

Gmail POP port: 995

Gmail POP TLS/SSL required: yes

- I just did a couple of general internet searches for you.

I'm not sure that you can transfer emails from one server to another unless you have some offer to do that.

Consider using an email client such as Thunderbird, which can receive and store emails on your PC. I have emails going back many years.

(Of course, also back up your PC!)

Brink · Apr 2, 2020

Greater protection and control with three new Gmail security tools

What’s changing

We’re making three Gmail security features generally available (GA). The features were previously in beta. Check out the linked announcements for more information on each:

Security sandbox, which detects the presence of previously unknown malware in attachments by virtually "executing" them in a private, secure sandbox environment. Learn more.

Advanced phishing and malware protection, which provides new controls to place emails into a quarantine, protect against anomalous attachment types, and protect your Google Groups from inbound spoofing emails. Learn more.

Gmail confidential mode, which provides built-in information rights management controls in your emails by allowing senders to create expiration dates and revoke previously sent messages. Learn more.

Who’s impacted

Admins and end users

Why you’d use it

When you deploy and manage security tools at scale, you can more effectively protect your users from threats. With these features now in GA, everyone in your organization—from admins to end users—is more secure.

How to get started

Admins:

Security sandbox: Note: available to G Suite Enterprise and G Suite Enterprise for Education editions only. Find and turn on the beta security sandbox feature at Admin console > Menu > Apps > G Suite > Gmail > Advanced settings. Use our Help Center to find more information on how to detect harmful attachments.

Advanced phishing and malware protection: Find and control these features at Admin console > Menu > Apps > G Suite > Gmail > Safety. You’ll find new options for anomalous attachment and groups spoofing protections, and see the quarantine option available for all controls. Use our Help Center to learn more about how to enhance phishing and malware protection.

Gmail confidential mode: This feature is on by default so no action is required to get started. To disable the feature, navigate to Admin console > Apps > G Suite > Settings for Gmail > User settings.

End users:

Security sandbox: No action needed.

Advanced phishing and malware protection: No action needed.

Gmail confidential mode: Follow the steps in this Help Center article to send and open confidential emails.

Helpful links

Cloud blog: New G Suite security protections to guard against security attacks

G Suite Updates blog: Increase email security with the security sandbox for Gmail beta

G Suite Updates blog: Advanced phishing and malware protection for Gmail beta

G Suite Updates blog: Gmail confidential mode launching on by default on June 25, 2019

Availability

Rollout details

Security Sandbox

Rapid Release domains: Full rollout (1-3 days for feature visibility) staring on June 25, 2019.

Scheduled Release domains: Full rollout (1-3 days for feature visibility) staring on June 25, 2019.

Advanced phishing and malware protection

Rapid Release domains: Extended rollout (potentially longer than 15 days for feature visibility) starting on June 25, 2019.

Scheduled Release domains: Extended rollout (potentially longer than 15 days for feature visibility) starting on June 25, 2019.

Gmail confidential mode

Rapid Release domains: Full rollout (1-3 days for feature visibility) staring on June 25, 2019.

Scheduled Release domains: Full rollout (1–3 days for feature visibility) starting on June 25, 2019.

G Suite editions

Security Sandbox

Available to G Suite Enterprise and G Suite Enterprise for Education.

Not available to G Suite Basic, G Suite Business, G Suite for Education, and G Suite for Nonprofits.

Advanced phishing and malware protection

Controls are available to all G Suite editions.

Chart to view affected emails available is part of the security center and so is available to G Suite Enterprise and G Suite Enterprise for Education editions only.

Gmail confidential mode:

Available to all G Suite editions.

On/off by default?

Security sandbox: This feature will be OFF by default and can be enabled at the OU level.

Advanced phishing and malware protection: This feature will be ON by default.

Gmail confidential mode: This feature will be ON by default.

Click to expand...

Source: https://gsuiteupdates.googleblog.com...fidential.html

Brink · Apr 2, 2020

Greater protection and control with three new Gmail security tools

What’s changing

We’re making three Gmail security features generally available (GA). The features were previously in beta. Check out the linked announcements for more information on each:

Security sandbox, which detects the presence of previously unknown malware in attachments by virtually "executing" them in a private, secure sandbox environment. Learn more.

Advanced phishing and malware protection, which provides new controls to place emails into a quarantine, protect against anomalous attachment types, and protect your Google Groups from inbound spoofing emails. Learn more.

Gmail confidential mode, which provides built-in information rights management controls in your emails by allowing senders to create expiration dates and revoke previously sent messages. Learn more.

Who’s impacted

Admins and end users

Why you’d use it

When you deploy and manage security tools at scale, you can more effectively protect your users from threats. With these features now in GA, everyone in your organization—from admins to end users—is more secure.

How to get started

Admins:

Security sandbox: Note: available to G Suite Enterprise and G Suite Enterprise for Education editions only. Find and turn on the beta security sandbox feature at Admin console > Menu > Apps > G Suite > Gmail > Advanced settings. Use our Help Center to find more information on how to detect harmful attachments.

Advanced phishing and malware protection: Find and control these features at Admin console > Menu > Apps > G Suite > Gmail > Safety. You’ll find new options for anomalous attachment and groups spoofing protections, and see the quarantine option available for all controls. Use our Help Center to learn more about how to enhance phishing and malware protection.

Gmail confidential mode: This feature is on by default so no action is required to get started. To disable the feature, navigate to Admin console > Apps > G Suite > Settings for Gmail > User settings.

End users:

Security sandbox: No action needed.

Advanced phishing and malware protection: No action needed.

Gmail confidential mode: Follow the steps in this Help Center article to send and open confidential emails.

Helpful links

Cloud blog: New G Suite security protections to guard against security attacks

G Suite Updates blog: Increase email security with the security sandbox for Gmail beta

G Suite Updates blog: Advanced phishing and malware protection for Gmail beta

G Suite Updates blog: Gmail confidential mode launching on by default on June 25, 2019

Availability

Rollout details

Security Sandbox

Rapid Release domains: Full rollout (1-3 days for feature visibility) staring on June 25, 2019.

Scheduled Release domains: Full rollout (1-3 days for feature visibility) staring on June 25, 2019.

Advanced phishing and malware protection

Rapid Release domains: Extended rollout (potentially longer than 15 days for feature visibility) starting on June 25, 2019.

Scheduled Release domains: Extended rollout (potentially longer than 15 days for feature visibility) starting on June 25, 2019.

Gmail confidential mode

Rapid Release domains: Full rollout (1-3 days for feature visibility) staring on June 25, 2019.

Scheduled Release domains: Full rollout (1–3 days for feature visibility) starting on June 25, 2019.

G Suite editions

Security Sandbox

Available to G Suite Enterprise and G Suite Enterprise for Education.

Not available to G Suite Basic, G Suite Business, G Suite for Education, and G Suite for Nonprofits.

Advanced phishing and malware protection

Controls are available to all G Suite editions.

Chart to view affected emails available is part of the security center and so is available to G Suite Enterprise and G Suite Enterprise for Education editions only.

Gmail confidential mode:

Available to all G Suite editions.

On/off by default?

Security sandbox: This feature will be OFF by default and can be enabled at the OU level.

Advanced phishing and malware protection: This feature will be ON by default.

Gmail confidential mode: This feature will be ON by default.

Click to expand...

Source: https://gsuiteupdates.googleblog.com...fidential.html

Windows 10: New Gmail email security with TLS by default and other new features

New Gmail email security with TLS by default and other new features

New Gmail email security with TLS by default and other new features

New Gmail email security with TLS by default and other new features

New Gmail email security with TLS by default and other new features - Similar Threads - Gmail email security

I have a new feature in windows security what is this new feature

I have a new feature in windows security what is this new feature

New settings for smart features and personalization in Google Gmail

Remove new feature in Gmail

Must new security feature for EDGE

New gmail features missing?

Making Gmail my default email

Re: Gmail as default email

Google adds new security updates to Gmail