Friday, March 6, 2015

But then, maybe they couldn't afford $0.85 per user per month on their small system

If Begala knows what he's talking about, then this is significant. Why?

Click this link, make sure it is on the DNS records tab, and scroll down to the MX records. Don't worry if you don't know how to read them- this isn't going to be hard. Do you see how the MX records list clintonemail.com.inbound10.mxlogicmx.net and clintonemail.com.inbound10.mxlogic.net? Those records say, "direct emails for this domain (clintonemails.com) to those servers", and those servers are mxlogic.com servers.

The Clitnonemails.com domain is set up to pipe its emails through MXLogic, which is now owned by McAfee. Their service provides email filtering-- spam removal and, more importantly, blocking of malicious email such as phishing attempts and other email-based cyber attacks.

But they also offer archiving services.

What kind of archiving services? This kind. Especially read the section on page 2 under "Document Compliance Made Easy." I screen-grabbed a few excerpts here:

Click on each picture to expand- or just read the brochure I linked. [Edited to add: It turns out it is harder to get to the images in an embedded tweet than I would like. The relevant section says, in part:

  • Tamperproof read-only storage—Messages and message metadata are protected in their original state
  • Dual data centers—Eliminates the threat of a single point of failure, ensuring that no message is ever lost
  • Automatic quality verification—Verifies that stored message copies are identical to the originals
  • Dual commit message capture—Messages aren’t deleted from your email server until accurate copies have been made and verified
  • Auditable message serialization—Adds a unique numeric identifier to each message to comply with SEC requirements that prohibit tampering or deletion of messages
  • Transport and storage encryption—Messages are transported securely via TLS or SSL, and are stored using 256-bit encryption
]

While I did not get a price quote from them directly, I did find this, which does have pricing for McAfee's services as an authorized re-seller. You can bet that these are not far from what it would be. The Email Security & Archiving Suite with Multi-Year Retention? $3.67 per user/month. Given the small number of users on the Clintonemail.com domain, it would be an inconsequential amount for the Clintons. The option without archiving? $2.82 per user/month.

If Hillary has a "non-archival compliant" system, it is because they chose not to spend an extra $0.85 per user per month. And as anyone who has ever signed up for one of these services knows, they try to up-sell you when you do; no way they didn't hear all of the benefits of the extra cost.

[Edited to add: Of course, this means there will never be an incriminating email in anything HRC's camp turns over or has turned over. They're long gone. If there was anything bad, the only way it will come out is from anyone on the other end of those emails, or anyone who intercepted one. Such a person would have some leverage, don't you think?]

{Edited again to add: Also note that the archiving service includes transport and storage encryption. This would have prevented things like a system administrator from being able to read the archived emails-- a nice bit of security that they simply chose to not spend a pittance to get.]

No comments:

Post a Comment

By and large I am going to rely on Twitter to be the 'comments' section here. You can submit comments, but moderation is enabled, and nearly all of the time I am not even going to check the moderation queue (although in some circumstances, I just might).