Microsoft “purview” message encryption

4 views
Skip to first unread message

Norm Tovey-Walsh

unread,
Apr 15, 2024, 6:24:03 AMApr 15
to mu-di...@googlegroups.com
Hi,

Apologies for a slightly off-topic question. I’ve received a message that’s “protected by Microsoft Purview Message Encryption” and I fear I may receive more.

It’s a long shot, but is there anyway to read these outside of the Microsoft ecosystem? (Leaving aside for the moment that I have no idea how I’d get it into that ecosystem if I wanted to. Which I don’t.)

Be seeing you,
norm

--
Norm Tovey-Walsh <n...@nwalsh.com>
https://norm.tovey-walsh.com/

> First time surrealists are often confused by the similarities between
> fish and telephones.
signature.asc

Joost Kremers

unread,
Apr 15, 2024, 7:08:25 AMApr 15
to Norm Tovey-Walsh, mu-di...@googlegroups.com
On Mon, Apr 15 2024, Norm Tovey-Walsh wrote:
> Hi,
>
> Apologies for a slightly off-topic question. I’ve received a message that’s
> “protected by Microsoft Purview Message Encryption” and I fear I may receive
> more.
>
> It’s a long shot, but is there anyway to read these outside of the Microsoft
> ecosystem?

A quick look at one of the Microsoft help pages on the subject[1] suggests that
there is not.

> (Leaving aside for the moment that I have no idea how I’d get it
> into that ecosystem if I wanted to. Which I don’t.)

Those pages also suggest that you should have received a "wrapper" e-mail with a
button that takes you to a web page where you can read the message.

It's not entirely clear, but I get the impression that "encrypted" messages are
not actually e-mail messages delivered to you inbox. They seem to be stored on a
Microsoft server, so what you get in your inbox is not the actual message in
encrypted form but rather an e-mail that simply points to the message on
Microsoft's servers.

I don't know if it's simply shortsightedness (Microsoft devs having no idea
what exists outside their bubble), NIH syndrome, or a conscious lock-in
strategy, but leave it to Big Tech™ to come up with a needless solution to a
solved problem (PGP) that just makes life more difficult for the rest of us...

Anyway, looks like you're gonna have to sip from the Kool-Aid a bit at least, or
protest vehemently with the sender and hope that they see the error of their
ways.

HTH

Joost


Footnotes:
[1] <https://learn.microsoft.com/en-us/purview/ome> and
<https://support.microsoft.com/en-us/office/how-do-i-open-a-protected-message-1157a286-8ecc-4b1e-ac43-2a608fbf3098>

--
Joost Kremers
Life has its moments

Norm Tovey-Walsh

unread,
Apr 15, 2024, 7:17:29 AMApr 15
to Joost Kremers, mu-di...@googlegroups.com
Joost Kremers <joostk...@fastmail.fm> writes:
> On Mon, Apr 15 2024, Norm Tovey-Walsh wrote:
>> It’s a long shot, but is there anyway to read these outside of the Microsoft ecosystem?
>
> A quick look at one of the Microsoft help pages on the subject[1] suggests that there is not.

Indeed. That was the impression I got.

>> (Leaving aside for the moment that I have no idea how I’d get it
>> into that ecosystem if I wanted to. Which I don’t.)
>
> Those pages also suggest that you should have received a "wrapper" e-mail with a button that takes you to a web page where you can read the message.

Yes, well, you’d think right? Unfortunately, for complicated reasons having to do (I think, maybe) with a brief period when our (then) ISP reconfigured our mail to go through to some Outlook service, I can’t login with my work email address and I can’t read the message with my personal email address. ¯\_(ツ)_/¯

> I don't know if it's simply shortsightedness (Microsoft devs having no idea what exists outside their bubble), NIH syndrome, or a conscious lock-in strategy, but leave it to Big Tech™ to come up with a needless solution to a solved problem (PGP) that just makes life more difficult for the rest of us...

Yep.

> Anyway, looks like you're gonna have to sip from the Kool-Aid a bit at least, or protest vehemently with the sender and hope that they see the error of their ways.

I’ve done my best on the latter score. We’ll see what happens.

Thank you for your time mu-discuss and apologies for the noise.

Be seeing you,
norm

--
Norm Tovey-Walsh <n...@nwalsh.com>
https://norm.tovey-walsh.com/

> We are constantly invited to be who we are.--Henry David Thoreau
signature.asc

Tim Cross

unread,
Apr 15, 2024, 9:50:43 AMApr 15
to Norm Tovey-Walsh, mu-di...@googlegroups.com
Norm Tovey-Walsh <n...@nwalsh.com> writes:

A brief look at MS docs gives the distinct impression that what MS have
done is, as usual, instead of following existing standards, have
invented their own closed system designed primarily to create lock in
and in and attempt to 'own' the space.

From a quick read, I suspect they are following a model which has been
tried and failed by other 'secure' message providers where you don't
actually receive an email. What you actually receive is a link to a
message stored on a MS server which you can access via a 'portal'. THis
is how they can implement additional controls, such as preventing
recipients from being able to forward messages to a 3rd party or
deleting messages after a specific period etc.

As they are not using industry standard PGP, there is little that ou can
do outside their environment.

My suggestion would be to inform anyone who sends you a message in this
format that you cannot access it and request they send you the message
using standard email protocols. It is highly likely this email model
will fail (as it has before) and all we need do is just out live MS
stupidity. If we are lucky, their messages will be flagged as spam and
using this type of email will drop out of vogue faster.

One legitimate reason not to read/respond to messages of this type is
that you have to do it via a MS portal. It means the message will never
be in YOUR system (therefore cannot be archived with the rest of your
mail) and should you need to respond/reply to the message, it actually
happens only within the MS environment i.e. won't be in your 'sent'
folder. This should raise some red flags for enerprsies/business which
are not MS based as it means official correspondence for an organisation
is not passing through standard business processes of that organisation
(possible implications wrt official records or legal issues).

Jerry Lee Daniel

unread,
May 7, 2024, 5:22:09 AMMay 7
to mu-discuss
MT103/202 DIRECT WIRE TRANSFER
PAYPAL TRANSFER
CASHAPP TRANSFER
ZELLE TRANSFER
TRANSFER WISE
WESTERN UNION TRANSFER
BITCOIN FLASHING
BANK ACCOUNT LOADING/FLASHING
IBAN TO IBAN TRANSFER
MONEYGRAM TRANSFER
IPIP/DTC
SLBC PROVIDER
CREDIT CARD TOP UP
DUMPS/ PINS
SEPA TRANSFER
WIRE TRANSFER
BITCOIN TOP UP
GLOBALPAY INC US
SKRILL USA
UNIONPAY RECEIVER

Thanks.


NOTE; ONLY SERIOUS / RELIABLE RECEIVERS CAN CONTACT.

DM ME ON WHATSAPP
+1 (918) 707‑0858
Reply all
Reply to author
Forward
0 new messages