New Security Requirements Coming for ITS E-mail Service Users
February 1, 2005

The deadline for Secure Socket Layer (SSL) changes, originally planned for Jan. 25, has recently been extended to Feb. 1 to help accommodate individuals who have not yet made the modifications in their e-mail software. Beginning February 1 next month, all students, faculty, and staff who use ITS e-mail services will be required to check e-mail via a secure-only connection using SSL, a type of software that encrypts (or scrambles) individual userids and passwords when users check e-mail via mail.psu.edu or email.psu.edu. The SSL changes are part of Penn State's on-going security effort to make e-mail correspondence at the University safer. University officials urge all computer users in the Penn State community to set up the SSL configuration (outlined at http://helpdesk.psu.edu/email.sslconfig.html.) in their e-mail software, if they haven't yet done so. (Note: these changes are not necessary for those who rely solely on Penn State WebMail to access their e-mail.) According to officials at ITS, notices have been sent out to all students, faculty and staff who have not yet made the change to use secure POP (SSL, KPOP), stating that it's critical this change is made, or they will not be able to access e-mail after February 1st. It should be noted that KPOP and Penn State WebMail are still valid and secure ways for e-mail and users who currently use KPOP or Penn State WebMail can continue to do so.