AOL's network: Private?

[Scott Fullerton <sfullerton@glhec.org>]

This is for the Electronic Exchange Listserve
.
The following exchange between myself and Teemu Kolehmainen, the CompuServe/AOL 
manager of  mail systems, took place before the situation with NAI showed signs 
of improvement.  It touches on an option some were exploring last week: whether 
there could be sufficient security without encryption/authentication if all 
parties to a transaction logged in to CompuServe and used POP3.
.
Teemu's response does NOT guarantee the security of that option.  In my 
opinion, since PGP looks like a viable option for us, we don't need to pursue 
the question of unsecured mail on CompuServe further.  Any thoughts?
Scott

-----Original Message-----
From:	"Teemu Kolehmainen" <teemu@csi.com>
Sent:	Tuesday, February 24, 1998 3:17 PM
To:	Scott Fullerton
Subject:	Re: <Autofrwd>AOL's network: Private?

Scott,

I am not a network specialist, but my understanding is that the messages would 
pass in the open at some level.  However, I would imagine that the risk would 
be minimal if all messages stayed within our systems.  It would be safe to say 
that encryption is required for enhanced security when dealing on the net.
Teemu
.
-----Original Message-----
From:	Scott Fullerton <sfullerton@glhec.org>
To:	Teemu (E-mail) <Teemu@csi.com>
Date:	Monday, February 23, 1998 10:24 AM
Subject:	<Autofrwd>AOL's network: Private?
.
Hi Teemu
.
I am writing with a question that has arisen in the CommonLine group.  To what 
extent does CompuServe/AOL run on a private network?  If all parties send and 
receive from CompuServe/POP3 mailboxes, do their transactions stay off the 
public Internet?   I think this came up in earlier discussions, but I want to 
make sure I understand clearly.  We are contemplating the option of going to 
>POP3 (at least initially) without requiring message encryption and
authentication, and therefore need to know how secure this is likely to be.
.
Thanks, Teemu.
.
Scott Fullerton
Chair CommonLine Electronic Exchange Subcommittee
608.246.1779