Introduction
This document describes additional email headers that can be implemented through content or message filters on the Cisco Email Security Appliance (ESA).
Enable Envelope Key Caching for Offline Opening
In order to send a Registered Envelope with envelope key caching enabled, insert this header into the message:
X-PostX-Remember-Envelope-Key-Checkbox: true
The "Remember the password for this envelope" check box is displayed on the Registered Envelope.
Enable JavaScript-Free Envelopes
In order to send a Registered Envelope that is JavaScript-free, insert this header into the message:
X-PostX-Use-Script: false
When the recipient opens the securedoc.html attachment, the Registered Envelope is displayed with an Open Online link, and the Open button is disabled.
Enable Message Expiration
In order to configure a message so that it expires 24 hours after you send it, insert this header into the message:
X-PostX-ExpirationDate: +24:00:00
The recipient can open and view the content of the encrypted message during the 24-hour period after you send it. After that, the Registered Envelope displays a message that indicates that the envelope has expired.
Disable the Decryption Applet
In order to disable the decryption applet and have the message attachment decrypted at the key server, insert this header into the message:
X-PostX-Suppress-Applet-For-Open: true
Note: The message might take longer to open when you disable the decryption applet, but it is not dependent on the browser environment.
Additional Information
Multipurpose Internet Mail Extensions (MIME) Header |
Description |
Value |
X-PostX-Reply-Enabled |
Indicates whether to enable a secure reply for the message and displays the Reply button in the message bar. This header adds an encryption setting to the message. |
A Boolean value for whether to display the Reply button. Set to true to display the button. The default value is false. |
X-PostX-Reply-All-Enabled |
Indicates whether to enable a secure "reply all" for the message and displays the Reply All button in the message bar. This header overrides the default profile setting. |
A Boolean value for whether to display the Reply All button. Set to true in order to display the button. The default value is false. |
X-PostX-Forward-Enabled |
Indicates whether to enable secure message forwarding and displays the Forward button in the message bar. This header overrides the default profile setting. |
A Boolean value for whether to display the Forward button. Set to true in order to display the button. The default value is false. |
X-PostX-Send-Return-Receipt |
Indicates whether to enable read receipts. The sender receives a receipt when recipients open the Secure Envelope. This header overrides the default profile setting. |
A Boolean value for whether to send a read receipt. Set to true in order to display the button. The default value is false. |
X-PostX-ExpirationDate |
Defines a Registered Envelope's expiration date before it sends it. The key server restricts access to the Registered Envelope after the expiration date. The Registered Envelope displays a message that indicates that the message has expired. This header adds an encryption setting to the message. If you use Cisco Registered Envelope Service, you can log into the website at http://res.cisco.com and use the message management features to set, adjust, or eliminate the expiration dates of messages after you send them. |
A string value that contains relative date or time. Use the +HH:MM:SS format for relative hours, minutes, and seconds, and the +D format for relative days. By default, there is no expiration date. |
X-PostX-ReadNotificationDate |
Defines the Registered Envelopes "read by" date before it sends it. The local key server generates a notification if the Registered Envelope has not been read by this date. Registered Envelopes with this header do not work with Cisco Registered Envelope Service, only a local key server. This header adds an encryption setting to the message. |
A string value that contains relative date or time. Use the +HH:MM:SS format for relative hours, minutes, and seconds, and the +D format for relative days. By default, there is no expiration date. |
X-PostX-Suppress-Applet-For-Open |
Indicates whether to disable the decryption applet. The decryption applet causes message attachments to be opened in the browser environment. If you disable the applet, it causes the message attachment to be decrypted at the key server. If you disable this option, messages might take longer to open, but they are not dependent on the browser environment. This header overrides the default profile setting. |
A Boolean value for whether to disable the decryption applet. Set to true in order to disable the applet. The default value is false. |
X-PostX-Use-Script |
Indicates whether to send JavaScript-free envelopes. A JavaScript-free envelope is a Registered Envelope that does not include the JavaScript that is used to open envelopes locally on the recipient's computer. The recipient must use either the Open Online method or the Open by Forwarding method in order to view the message. Use this header if a recipient domain's gateway strips JavaScript and makes the encrypted message unopenable. This header adds an encryption setting to the message. |
A Boolean value for whether the JavaScript applet should be included or not. Set to false in order to send a JavaScript-free envelope. The default value is true. |
X-PostX-Remember-Envelope-Key- Checkbox |
Indicates whether to allow envelope-specific key caching for offline opening of envelopes. With envelope key caching, the decryption key for a particular envelope is cached on the recipient's computer when the recipient enters the correct password and selects the "Remember the password for this envelope" check box. After that, the recipient does not need to enter a password again in order to re-open the envelope on the computer. This header adds an encryption setting to the message. |
A Boolean value for whether to enable envelope key caching and display the "Remember the password for this envelope" check box. The default value is false. |