Is CFMAIL Secure?

Hello,

I've been using CF for a while and have most recently written an ap that is basically a form that just emails some of the captured data using the cfmail function.

The ap itself is in a secure folder, but when it sends the email is the email itself secure or encrypted? Can it be sniffed out?
Would it be better if I had the data saved off as a word doc or database and then attached and sent out using cfmail? Or am I on the wrong path- is it an SMTP setting that I'll need to toy with.

It's a Windows 2003 server without exchange.

Thanks!
Scott

If you encrypted the email message, how would the other person decrypt it? As far as I know, all SMTP email is sent in plain text. The only exception might be using digital signatures.

hmmmm....

So sensetive information shouldn't be sent through CFmail then? i'm trying to think of a different way to do this that is more secure.

Maybe write a table or word doc with the info and send the link to the document whcih will be held in a secure folder?

Email is email and email is unsecure. Sure you could encrypt it, but as said above, the other person would have to be able to decrypt it with that same algorithm.
Database is really the only way to go with any sort of sensitive information. If you use a secure connection, it can't be intercepted, and someone would have to either get into your server, or know quite a bit about it in order to extract the data. This is how things like this are generally done.
I'd say built an insert page and a view page and restrict access.