Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Warning about invalid signatures must be enforced.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-17803 | DTOO265 - Outlook | SV-33571r1_rule | ECSC-1 | Medium |
| Description |
|---|
| If users open e-mail messages that include invalid digital signatures, Outlook displays a warning dialog box. Users can decide whether they want to be warned about invalid signatures in the future. If users are not notified about invalid signatures, they might be prevented from detecting a fraudulent signature sent by a malicious person. |
| STIG | Date |
|---|---|
| Microsoft Outlook 2010 | 2015-09-18 |
Details
| Check Text ( None ) |
|---|
| None |
| Fix Text (F-29717r1_fix) |
|---|
| Set the policy value for User Configuration -> Administrative Templates -> Microsoft Outlook 2010 -> Security -> Cryptography “Signature Warning” to “Enabled (Always warn about invalid signatures)”. |