The smime tag has no wiki summary.
3
votes
1answer
33 views
Obtaining an S/MIME certificate without disclosing my private key to the TTP
I would like to obtain a trusted S/MIME certificate, but all the certificate authorities I have asked so far generate the keypair on their server, sign the certificate and send me both the private key ...
1
vote
2answers
60 views
Why is S/MIME (instead of PGP) recommended for such an scenario?
A large MNC with approximately 50,000 employees, and with offices in Asia, Europe and North America. This MNC operates its own PKI environment, with a self-signed Certificate Authority based at its ...
1
vote
1answer
68 views
How to have Thunderbird include a root certificate?
An eMail signed via S/MIME also contains the X.509 certificate chain containing the public key in order to directly verify the signature (assuming its issuing CA is deemed trustworthy). The chain does ...
1
vote
1answer
120 views
Can I use any ssl certificate to sign and encrypt AS2 message?
I'm absolutely new to this topic of ssl certificates, so please be patient with me.
My task is to install an AS2 communication with some business partner. Therefore we need message signing and ...
1
vote
1answer
108 views
PKCS#7 message constructed by our code, any weaknesses in the output?
We have this as the PKCS#7 encrypted message. We would like to open this up for review and analysis here, for people to poke holes. This sample is generated via test certificates and keys. The concern ...
2
votes
1answer
182 views
What Enhanced Key Usages are required for PKI infrastructure tasks? (OIDs for OSPF and CRL signing, etc)
I'm building a constrained PKI that specifies EKUs for the the entire hierarchy and want to document the OIDs required for PKI tree maintenance tasks.
I understand that clients may not validate the ...
0
votes
1answer
83 views
Does S/MIME provide means to propagate a certificate's revocation?
Can a revocation certificate for an old X.509 certificate be attached to an email in addition to a replacement certificate in such a way that the client user does not have to manually intervene? Or ...
2
votes
1answer
94 views
Apart from the lack of native Oultook support, why should one prefer S/MIME over PGP/MIME for email?
From my (still quite subjective) point of view, GnuPG/PGP is superior to SSL (or more specifically, PGP/MIME over S/MIME; maybe in other areas SSL is the better choice), e.g. due to the support of ...
2
votes
1answer
200 views
Which extensions to use for a S/MIME certificate?
Analogously to the SSL server certificate question, which extensions should I use for S/MIME, and should the CA be restricted somehow as well?
(I'm using openssl, which at the moment creates CA and ...
