| Both sides previous revisionPrevious revisionNext revision | Previous revision |
| strw:mailforward [2023/06/14 09:37] – jansen | strw:mailforward [2024/03/15 13:10] (current) – deul |
|---|
| ======Automatic Mail Forwarding====== | ======Automatic Mail Forwarding====== |
| From 15 june 2023 the university has installed a 'no automatic mail forwarding to external email address' policy. For details, please read {{https://www.staff.universiteitleiden.nl/announcements/2023/05/online-safety-automatic-forwarding-to-external-email-addresses-no-longer-permitted|UL policy Automatic Forwarding to external email address}} or read the {{https://www.medewerkers.universiteitleiden.nl/binaries/content/assets/ul2staff/ict/maatregelen-cybersecurity/beleid-automatisch-doorsturen-universitaire-e-mail_2023.pdf|policy document}} | From 15 june 2023 the university has installed a 'no automatic mail forwarding to external email address' policy. For details, please read {{https://www.staff.universiteitleiden.nl/announcements/2023/05/online-safety-automatic-forwarding-to-external-email-addresses-no-longer-permitted|UL policy Automatic Forwarding to external email address}} or read the {{https://www.staff.universiteitleiden.nl/binaries/content/assets/ul2staff/veiligheid/policy-on-automatically-forwarding-university-emails_2023.pdf|policy document}} |
| |
| The University mail servers have been changed to revoke automatic mail forwarding to addresses outside the leidenuniv.nl domain. This is done to make sure mails with GDPR sensitive data are not automatically forwarded to places where the university does not have a GDPR processing agreement. | The University mail servers have been changed to revoke automatic mail forwarding to addresses outside the leidenuniv.nl domain. This is done to make sure mails with General Data Protection Regulation (GDPR) sensitive data are not automatically forwarded to places where the university does not have a GDPR processing agreement. |
| |
| Since the Observatory has its own mail server we have to implement the university policy ourselves, but can be much more creative than rigorously disable all forwarding, we have negotiated with the University that any mail containing GDPR sensitive data will have the word 'Vertrouwelijk' or 'Confidential' in the subject of that mail. Given this identification, we have implemented a filter in your ''%%.procmailrc%%'' file that redirects any such mail back into your ''%%INBOX%%'' thus taking it out of the stream that allows you forwarding to an external email address. | |
| |
| In short, any email marked 'Vertrouwelijk' or 'Confidential' will go to your ''%%INBOX%%'' and all other email you can forward to you favorite external (to leidenuniv.nl) email system. So you do not have to change anything, except look at your Sterrewacht inbox once in a while to see if a LeidenUniv GDPR sensitive mail has been sent to you. Our filter can (optionally) inform you that such an event has occurred. | |
| |
| **Note: If you write a confidential GDPR sensitive email to a Leiden employee you must mark that mail with 'Vertrouwelijk' or 'Confidential' (put this word in the mail Subject) to adhere to the University Mail Forwarding policy.** | |
| |
| We have installed, at the beginning of your ''%%.procmailrc%%'' file, a ruleset that will do the above mentioned actions. So please do not remove that as it helps you to adhere to the university policy while retaining your automatic forward (if set). | |
| |
| | ===== Email encryption ===== |
| | None of these measures actually do anything about the confidentiality of your mail; mails are still stored clear text on our email servers or on any other destination server unless you encrypt them.\\ |
| | If you care about privacy or if you handle sensitive information in your email correspondence, we strongly advise you use encrypted emails. This is rather easy to set up following [[https://emailselfdefense.fsf.org/en/|this guide]]. |
| ===== Info message ===== | ===== Info message ===== |
| Our filtering rule set allows one bit of customization: if the variable ''INFOMESSAGE'' is set to ''yes'', you will | Our filtering rule set allows one bit of customization: if the variable ''INFOMESSAGE'' is set to ''yes'', you will |
| ===== Links ===== | ===== Links ===== |
| * {{https://www.staff.universiteitleiden.nl/announcements/2023/05/online-safety-automatic-forwarding-to-external-email-addresses-no-longer-permitted?cf=service-units|UL policy Automatic Forwarding to external email address}} | * {{https://www.staff.universiteitleiden.nl/announcements/2023/05/online-safety-automatic-forwarding-to-external-email-addresses-no-longer-permitted?cf=service-units|UL policy Automatic Forwarding to external email address}} |
| * {{https://www.medewerkers.universiteitleiden.nl/binaries/content/assets/ul2staff/ict/maatregelen-cybersecurity/beleid-automatisch-doorsturen-universitaire-e-mail_2023.pdf|UL policy document}} | * {{https://www.staff.universiteitleiden.nl/binaries/content/assets/ul2staff/veiligheid/policy-on-automatically-forwarding-university-emails_2023.pdf|UL policy document}} |
| * [[lion:forwarding|LION (incl Instituut Lorentz) mail forwarding setup]] | * [[lion:forwarding|LION (incl Instituut Lorentz) mail forwarding setup]] |
| | * {{https://gdpr.eu/what-is-gdpr/|What is GDPR sensitive data}} |
| | * [[https://emailselfdefense.fsf.org/en/|guide about email encryption]] |
| |
| |
