My organization is currently looking into encrypting our emails internally as well as the occasional message to come outside recipients. The requirements are currently a bit overwhelming and I am not sure where to begin. We run a somewhat mixed environment:
- Exchange Server 2010 SP1
- Outlook 2007
- Thunderbird 3.1
- BlackBerry (with BES)
When management asked for encryption with PGP, they want everyone in the company to be able to seamlessly send/receive encrypted emails on both their desktop email client and phones. Obviously I won't be able to meet all of their requirements and I don't care if it is an open-source or commercial solution. I understand private/public key encryption, but I have never setup anything like this before.