EmailSentry™ Add-In Security

Is It Safe To Use?

EmailSentry does not look at the content of any email. It does not look at email addresses. It only looks at the domain part (the part after the "@"). All communication is via HTTPS, so all information is encrypted.

Is It Safe to Install?

For EmailSentry V02 (Outlook Classic), whether installed as a ClickOnce application or from the MSI, Microsoft makes sure that it can be uninstalled. And it is signed with a Sectigo code-signing certificate making it very difficult to hack or spoof.

For EmailSentry V03 (Outlook), Microsoft makes add-ins run in a "sandbox" as part of their switch to new Outlook add-ins, so it is well protected.

Can EmailSentry Break Outlook?

No.

• Microsoft automatically disables any add-in that fails.
• Microsoft disables any add-in that takes more than a second or two to load.
• Your entire EmailSentry installed base can be disabled with one change in one host file.

How and What Exactly Does It Send and Receive?

All communication between Outlook and CheckTLS uses HTTPS so is encrypted and only connects via port 443. Unlike any other test, it does not require opening port 25 (SMTP) to a PC. We can provide examples of the source code of the WebService call and the return XML document upon request.

Sent to CheckTLS

For every recipient on every email EmailSentry sends three things:

• just the domain part of the recipient's address (not the full address)
• your Primary Account email address (how we license EmailSentry)
• your configuration settings (e.g. minimum TLS version, minimum score)
• a unique string of your PC's user and computer names (safeguards licenses)

Received from CheckTLS

The WebService returns an XML document with the TestReceiver score: <CheckTLS> <eMailAddress>checktls.com</eMailAddress> <ConfidenceFactor quick="1" available="114" percent="100.00" max="121">114</ConfidenceFactor> <ConfidenceQFactor>114</ConfidenceQFactor> <OutputFormat>XML_Score</OutputFormat> <MXConfidenceFactor>60</MXConfidenceFactor> </CheckTLS>

Can EmailSentry Work With a Firewall Proxy Server?

Yes, just as you can configure your browser to route all URLs through your company's proxy server, EmailSentry can be configured to route its webservice call through your proxy server.

What Information Do You Keep About Our Email?

EmailSentry only uses the domain part of recipient (To:, CC:, BCC:) email addresses. It does not look at the user, subject, or body of the email. It cannot keep any of your confidential information because it doesn't have it.

We keep just enough data to provide the Usage Reports and Query Reports.