# Encryption always on

**URL:** <https://community.ciphermail.com/t/encryption-always-on/405>\
**Category:** Gateway\
**Created:** [October 22, 2014, 5:40pm UTC](https://community.ciphermail.com/t/encryption-always-on/405 "2014-10-22T17:40:39Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jerry\_DeLong](https://avatars.discourse-cdn.com/v4/letter/j/a9adbd/32.png) [@Jerry\_DeLong](https://community.ciphermail.com/u/Jerry_DeLong)\
**Post date:** [October 22, 2014, 5:40pm UTC](https://community.ciphermail.com/t/encryption-always-on/405/1 "2014-10-22T17:40:39Z")

</div>

Greetings list,

I am using the virtual appliance 2.9.0-0 and having an issue with every message being encrypted  
that passes through the gateway.

I am using only the OTP PDF and wanting it to only encrypt messages with a subject trigger.

I have set my encryption subject trigger and enabled it but all messages that pass through the  
gateway are encrypted

Any help with this would be appreciated.

Thank you, Jerry

---

<div class="post-metadata">

**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\
**Post date:** [October 22, 2014, 7:50pm UTC](https://community.ciphermail.com/t/encryption-always-on/405/2 "2014-10-22T19:50:44Z")

</div>

Hi Jerry,

By default "encrypt mode" is set to "allow". This means that the gateway  
will encrypt \*if\* possible. Since you enabled OTP (I guess for the  
global settings) encryption is always possible for all recipients and  
therefore every message is encrypted. To only encrypt when the subject  
contains some keyword do the following:

For global settings:

1. Set "Encrypt Mode" to "No Encryption"  
2. For "Encryption subject trigger"

&nbsp;&nbsp;a) set "Trigger" (the keyword that triggers encryption)  
&nbsp;&nbsp;a) check "Enabled"

3. Apply settings

Now encryption will not be enabled by default \*unless\* the trigger  
keyword is in the subject.

Kind regards,

Martijn Brinkers

> **···**
>
> On 10/22/2014 07:40 PM, Jerry DeLong wrote:
> 
> > I am using the virtual appliance 2.9.0-0 and having an issue with every message being encrypted  
> > that passes through the gateway.
> > 
> > I am using only the OTP PDF and wanting it to only encrypt messages with a subject trigger.
> > 
> > I have set my encryption subject trigger and enabled it but all messages that pass through the  
> > gateway are encrypted
> 
> --  
> CipherMail email encryption
> 
> Open source email encryption gateway with support for S/MIME, OpenPGP  
> and PDF messaging.
> 
> > **[CipherMail email encryption and digital signatures](https://www.ciphermail.com)**
> >
> > Easy to use server-side email encryption for automatic encryption and digital signing of email.
> 
> Twitter: [http://twitter.com/CipherMail](http://twitter.com/CipherMail)

---

<div class="post-metadata">

**Author:** ![Jerry\_DeLong](https://avatars.discourse-cdn.com/v4/letter/j/a9adbd/32.png) [@Jerry\_DeLong](https://community.ciphermail.com/u/Jerry_DeLong)\
**Post date:** [October 22, 2014, 8:04pm UTC](https://community.ciphermail.com/t/encryption-always-on/405/3 "2014-10-22T20:04:25Z")

</div>

Hi Martijn,

Thank you for your very quick response!

This worked great although it's a problem when I reply, the reply doesn't encrypt.

Jerry

---

<div class="post-metadata">

**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\
**Post date:** [October 22, 2014, 8:04pm UTC](https://community.ciphermail.com/t/encryption-always-on/405/4 "2014-10-22T20:04:47Z")

</div>

With reply you mean reply using the link in the PDF? If so you need to  
make sure that "Encrypt Mode" for the "Reply sender" is set to "Allow  
(sender or recipient)".

1. add a user with email set to the "PDF reply sender"  
2. set "Encrypt Mode" to "Allow (sender or recipient)"  
3. Apply

Kind regards,

Martijn Brinkers

> **···**
>
> On 10/22/2014 10:04 PM, Jerry DeLong wrote:
> 
> > Thank you for your very quick response!
> > 
> > This worked great although it's a problem when I reply, the reply doesn't encrypt.
> 
> --  
> CipherMail email encryption
> 
> Open source email encryption gateway with support for S/MIME, OpenPGP  
> and PDF messaging.
> 
> > **[CipherMail email encryption and digital signatures](https://www.ciphermail.com)**
> >
> > Easy to use server-side email encryption for automatic encryption and digital signing of email.
> 
> Twitter: [http://twitter.com/CipherMail](http://twitter.com/CipherMail)

---

<div class="post-metadata">

**Author:** ![Jerry\_DeLong](https://avatars.discourse-cdn.com/v4/letter/j/a9adbd/32.png) [@Jerry\_DeLong](https://community.ciphermail.com/u/Jerry_DeLong)\
**Post date:** [October 22, 2014, 8:31pm UTC](https://community.ciphermail.com/t/encryption-always-on/405/5 "2014-10-22T20:31:18Z")

</div>

Hi Martijn,

By enabling this per user then every email sent by the user is again encrypted.

It seems when I use the PDF reply it changes the subject line to re: and it's not encrypted.

Jerry

---

<div class="post-metadata">

**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\
**Post date:** [October 23, 2014, 6:13am UTC](https://community.ciphermail.com/t/encryption-always-on/405/6 "2014-10-23T06:13:04Z")

</div>

> By enabling this per user then every email sent by the user is again encrypted.

That's why you should only do this for the PDF reply sender (the sender  
email address you have specified in the PDF advanced settings):

1. add a user with email address of the "PDF reply sender"  
2. set "Encrypt Mode" of this user to "Allow (sender or recipient)"  
3. Apply

> It seems when I use the PDF reply it changes the subject line to re: and it's not encrypted.

The PDF reply (i.e., the reply sent from the portal) is sent with the  
"PDF reply sender" as the sender (i.e., from). This makes it possible to  
also specify what should happen with the reply. In your case you want  
the reply to be encrypted so that's why you need to override the  
inherited "Encrypt Mode" only for the "PDF reply sender" so make replies  
always encrypt.

Kind regards,

Martijn Brinkers

> **···**
>
> On 10/22/2014 10:31 PM, Jerry DeLong wrote:
> 
> --  
> CipherMail email encryption
> 
> Open source email encryption gateway with support for S/MIME, OpenPGP  
> and PDF messaging.
> 
> > **[CipherMail email encryption and digital signatures](https://www.ciphermail.com)**
> >
> > Easy to use server-side email encryption for automatic encryption and digital signing of email.
> 
> Twitter: [http://twitter.com/CipherMail](http://twitter.com/CipherMail)
