Email (IMAP & SMTP) - Medical Engineering

1. Definition

Email relies on two main protocols: SMTP (Simple Mail Transfer Protocol) for sending messages, and IMAP (Internet Message Access Protocol) for receiving and managing them on a server. A third protocol, POP3, is older and less used.

2. Key Details

SMTP: Used to send email from a client to a server, and between servers. It pushes messages toward the recipient's mail server.
IMAP: Allows you to view and organize emails directly on the server. Changes (read, delete) are synchronized across all devices.
POP3: Downloads emails to one device and usually deletes them from the server – not ideal for multi‑device access.

3. Webmail vs Email Clients

Webmail	Email Client
Accessed via browser (e.g., Gmail, Outlook.com)	Installed software (e.g., Microsoft Outlook, Thunderbird, Apple Mail)
Emails stored on provider's servers	Can store emails locally or keep them on server (IMAP)
Accessible from any device with internet	Can work offline, manage multiple accounts in one place
Limited by browser features	Richer features, better integration with calendar/contacts

4. Advantages & Disadvantages of Each Protocol

SMTP: Essential for sending, but must be secured to prevent spoofing.
IMAP: Great for multi-device users (like doctors with phone, tablet, and computer). Requires server storage.
POP3: Simple, but can lead to losing emails if device fails.

5. Use Cases in Medical Engineering

Hospital staff communication: Secure email for scheduling, patient updates (non-sensitive).
Patient communication: Some portals use email for notifications (but never send sensitive data in plain text).
Integration with medical systems: Lab results can trigger email alerts to physicians.

6. Special Tips / Recommendations

Use encryption for email in transit (SMTP with TLS, IMAP with SSL).
Consider additional encryption like PGP for extremely sensitive data, but be aware of complexity.
Train staff to recognize phishing attempts – email is a common attack vector.
For official medical communication, use a dedicated domain (e.g., @chuv.ch) rather than free providers.

7. Practical Implementation (Conceptual)

To set up email for a clinic:

Register a domain (see DNS chapter) and configure MX records to point to your email provider (e.g., Microsoft 365, Google Workspace, or your own server).
If using a provider, they handle server setup; you just create user accounts (e.g., dr.smith@clinique.fr).
If running your own mail server, install server software (like Postfix for SMTP, Dovecot for IMAP) and configure SSL certificates.
On each staff device, configure an email client with the server settings (usually found in the provider's documentation).
Test sending and receiving, and ensure connections are secure.