Google Message Encryption Administration Guide - Manual (Page 10)

Introduction to Encryption Services 11
Message Encryption, Portal Delivery
Message Encryption, Portal Delivery can be used on an on-demand basis to
communicate with any recipient regardless of their capabilities. This secure-and
post-feature easily enables a sender to create a message in their native email
client and simply mark the message as confidential. For example, a Microsoft
Outlook user would set setting Sensitivity to Confidential when sending the
message. The email is seamlessly passed to Portal Delivery to be encrypted and
posted on a secure web portal. The recipient receives a notification in their native
email client informing them of the message location. The recipient can read the
message via the web portal and submit a reply to the sender. Replies arrive in the
sender’s native email client.
You can also customize the secure web portal used with Portal Delivery. With a
Custom Portal, you can add branding and additional features to the secure portal
your contacts see. A Custom Portal is an optional feature; for more information
about Custom Portals, contact your account representative.
Portal Delivery can be set on an organization or an individual user.
Message Encryption, Inbox Delivery
Message Encryption, Inbox Delivery can be used on an on-demand basis to
communicate securely with any recipient. This is similar to Portal Delivery, but
Inbox Delivery sends the encrypted message to the recipient as an attachment
and does not require a web portal login.
The email is seamlessly passed to Inbox Delivery to be encrypted, and is placed
as an attachment to a notification mail. The recipient receives the message as an
encrypted attachment which can be read locally using a standard web browser.
Inbox Delivery can be set on an organization or an individual user. Inbox Delivery
notifications can also be branded.
How Encryption Services Components Work Together
If you are using Policy Enforced TLS or Message Encryption, be sure to enable
TLS in the Administration Console. This allows mail which is not secured by these
methods to be encrypted if third-party servers support TLS, and assures that
connections between your server and the email protection service are encrypted.
Encryption Services features are designed to be used together. Policy Enforced
TLS allows you to create a special encryption policy for certain domains, and
Message Encryption allow you to send encrypted mail even when normal TLS
connections are not possible.
The two forms of Message Encryption, Portal Delivery and Inbox Delivery, are
similar services, and function identically up to the point of delivery to the recipient.
You can only have one of them enabled.