Transport Layer Security (TLS) provides a secure communication channel between hosts over the Internet, ensuring the privacy and integrity of the data during transmission.
Two hosts (the Deep Discovery Email Inspector appliance and the email relay) establish a TLS session as follows:
-
The sending host requests a secure connection with the receiving host by sending a cipher list.
-
The two hosts establish a connection.
The receiving host selects one cipher and replies with its digital certificate signed by a Certificate Authority (CA).
-
The sending host verifies the identity with the trusted CA certificate and generates the session keys by encrypting a message using a public key.
-
The receiving host decrypts the message using the corresponding private key.
-
The sending host's identity verifies when the receiving host can decrypt the message with the private key.
The TLS session establishes and email messages passed between the hosts are encrypted.
By default, Deep Discovery Email Inspector does not apply TLS or email encryption, nor does it verify email relay host identities. Enable TLS for Deep Discovery Email Inspector to encrypt incoming email messages.