I don’t have any experience in the security field, and I want your help. I want to ensure if the following suggestion is applicable and secure, if it’s not, please give me your suggestion to solve the problem.
A company wants to build a website to manage and monitor their employees, now each employee has a unique nick name, however, the official wants to use S/MIME protocol in order to allow the employees to transfer sensitive messages between each other. Those employees have a big problem in managing the public keys and certifications, can I use Keybase.io (its open source) and improved it to upload the employees’ certifications and public keys?
Do you think that it will be secure, where when john wants to send a message to Sara, he will put her nick name and the system will request her public key from the server and validate her certificate, is this way secure, if it’s not how I can improve it?