1
vote
3answers
150 views

S/MIME doesn't protect against a stolen password, right?

We're setting up S/MIME so that we can send encrypted emails. However, I have a bit of a stupid (and maybe obvious) question... If someone steals a password for either the sender or the receiver, ...
-2
votes
2answers
159 views

What was the Lavabit's backdoors to their customers' e-mails? [closed]

There has been some talk about the Lavabit's case. New info was published today, but not important. I'd like to know how Lavabit worked. First I thought they just did something with OpenPGP. Then I ...
0
votes
1answer
137 views

How do I determine S/MIME encryption used?

From what I understand it seems that S/MIME uses PKCS #7 which can handle various different types of encryption. How is the choice of encryption method made by the e-mail client and how do I know what ...
0
votes
1answer
126 views

How to fetch and update all my friend's keys? [closed]

Where can I upload a list of my friends and get a list of their keys found on keyservers? Here are some key servers: http://keyserver.ubuntu.com:11371/ http://pgp.mit.edu/ ...
3
votes
1answer
393 views

What's a trustworthy S/MIME Certificate Provider that generates my private key in my browser?

I read this question on the process of generating a private S/Mime key. I looked at Comodo - which offer free e-mail certificates. I'm trying to find out whether Comodo generates the private ...
2
votes
1answer
244 views

Why should I pay for an email S/MIME certificate?

There are quite a few SSL certificate companies out there that offer free email S/MIME certificates. There are also paid versions as well. I need about 6 email certificates for some company email ...
13
votes
3answers
725 views

Can a nation-state adversary perform a MITM attack by compelling a CA to issue them with fake certs?

As I understand it, with any encryption system based on a trust chain / CAs (eg SSL, TLS, S/MIME), it would be possible for a nation-state adversary (such as the NSA) to compel the CA to issue them ...
1
vote
1answer
246 views

PKCS#7 message constructed by our code, any weaknesses in the output?

We have this as the PKCS#7 encrypted message. We would like to open this up for review and analysis here, for people to poke holes. This sample is generated via test certificates and keys. The concern ...
1
vote
2answers
237 views

S/MIME verification

I am getting emails with smime.p7s attachments. when I look at my mail on my Linux box, I can see base64 encoded block in mail body. I can extract that block and open it on Windows using certmgr and ...