Harrier is our Military Messaging client. It provides a modern, secure web UI that supports SMTP, STANAG 4406 and ACP 127. Harrier allows authorised users to access role-based mailboxes and respond as a role within an organisation rather than as an individual.

You can find out more about Harrier here.

Data Centric Security

Support for NATO Data Centric Security (DCS) is the key change in Harrier 4.3. This affects security label handling details, noting that the UIs shown above are not significantly changed. Key changes under the hood:

• Use of STANAG 4774 NATO Confidentiality Labels throughout.

• Use of STANAG 4774 Label Catalogs for label selection. These catalogs can be generated by Isode’s Sapphire product.

• Binding of Confidentiality Labels to messages following the SMTP Profile specified in STANAG 4778, including the Cryptographic Message Syntax (CMS) secure binding of confidentiality labels to the message. The secure binding is automatically used when S/MIME signatures are enabled.

• Use of Open XML SPIF 3.0 Security Policy Information File (SPIF). This includes:

  • Display of security labels following the SPIF.

  • Multi-language support, illustrated in the screenshots above.

  • Capability checking following STANAG 5679 Confidentiality Metadata Based Access Control (CMBAC) using STANAG 4774 Confidentiality Clearances held in the directory.

Succession Labels

STANAG 4774 defines Succession Labels as part of the label lifecycle definition. This is a new function supported in Harrier 4.3. A clear goal of this work is to gain experience with succession labels. Succession Labels can be added, as shown below.

There are three key target uses of succession labels:

1. Long-term declassification (e.g., 10 years). The example above shows this. Based on feedback on this capability, it is anticipated that Sapphire catalog generation will be extended to include this sort of succession label.

2. Short-term declassification. For example, a message relating to plane flying might be extremely sensitive prior to the flight, but can have a reduced classification after the flight.

3. When re-addressing a message with a new confidentiality label, succession labeling will be used to retain the original label.

Labelled Attachments

Harrier 4.3 provides an experimental capability to assign a confidentiality label to a message attachment.

Feedback is sought on this capability, which currently uses a proprietary mechanism to label it in the MIME header. It is anticipated that a future capability will adopt a standard approach such as the STANAG 4778 OPC (Open Packaging Convention) label binding and data encryption.

Miscellaneous Features

Several smaller changes have been made to Harrier 4.3.

• The ability to see underlying email address and phone number of sender and recipients: