Re: Passwords in emails

["Jim Essinger" <dilbernator@xxxxxxxxx>]

When I have to email a password, I send one email saying the next I
send contains the password.

Or I will send the password, and then a 2nd email that explains the first email

Either way, both email messages would have to be captured to make any
sense.  What kind of exposure does that give you?

I would also, depending on the circumstances, require the remote user
to change their password at the first sign on.  That would make the
exposure a lot less.

Jim

On Wed, Oct 8, 2008 at 8:08 AM, Burns, Bryan <Bryan_Burns@xxxxxxxxxxxx> wrote:
> What kind of risk do we take if I email an iSeries password to a remote user using my Microsoft Outlook client?  Is this forbidden by any standards being that it's clear text?
>
> Bryan Burns
> iSeries Specialist
> ECHO, Incorporated
> Lake Zurich,  Illinois
>
> --