It is possible and you can do it very securely. Heres how, you need to configure Outlook for RPC over HTTPS. Here is an article that describes the entire process Configuring Outlook 2003 for RPC Over HTTP