Encrypting emails -- what to know

  • Published
  • By Senior Airman Frank Casciotta
  • 71st Flying Training Wing Public Affairs
Correspondence via email is routine for nearly every Team Vance member, and protecting the information within emails is one of the first lines of defense the Air Force has against potential hackers.

Recently, 71st Communications Flight members have noticed a spike in encrypted emails circling around Vance unnecessarily, said Jeffery Simon, the 71st Communications Flight director.

"I believe people are encrypting more emails to stay out of trouble," said Simon. "However, this practice puts undue stress on the email system and could potentially slow down the system."

Yet, at the same time, the encryptions are in place to prevent hackers from gaining access to user's personal information.

Email encryptions are designed to protect individuals and information from being exploited by hackers.

"If I'm a hacker, I can snatch up and read unencrypted emails, but I can't do anything with encrypted ones," said Simon, who has more than 20 years of experience working with computer security. "Hackers are constantly attacking our systems, even though most people don't realize it. It's complacency that is the big problem. It gives the hackers the opportunities they need."

While attempts to breach government networks are a daily occurrence, it is up to the users to preserve the system's functionality by using it correctly, said Simon.

"It comes down to education," he said. "Everything you need to know about what needs an encryption can be found in AFI 33-113."

However, most emails do not require encryption. Only emails containing information that, if in the wrong hands, could be harmful require encryption - like identity theft, for example.

Encryption must be used to protect emails over the Nonsecure Internet Protocol Router Network, also known as NIPRNet, containing anything with:

- For Official Use Only
- Privacy Act
- Personally Identifiable Information
- Individually identifiable health, DoD payroll, finance, logistics, personnel management, proprietary, and foreign government information
- Contract data
- Export controlled technical data or information
- Operational Security information and critical indicators

Air Force Instruction 33-119 Communications and Information gives more specific guidance on what requires an encryption.

Every Vance Airman is expected to do their best to protect sensitive information traveling through emails, said Simon. It is also their responsibly to keep the system well-lubricated by not overloading it with unnecessarily encrypted emails.