Questions tagged [smime]

S/MIME is a protocol for encrypting and signing messages, e.g. emails.

17 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
2
votes
0answers
82 views

Manually verifying signature in S/MIME mail with openssl

I'm trying to manually verify the signature in an S/MIME signed email with openssl as part of a homework. While I have the mail and can extract the chain of certificates, I'm failing to extract the ...
2
votes
0answers
140 views

Certificate Transparency and S/MIME certificates

When people speak about CT that usually means only TLS certificates are stored in log. However, CT probable might be considered for usage in other PKI-based technologies. Is CT designed to log S/MIME ...
1
vote
0answers
124 views

Get S/MIME from Digicert, store in escrow on on-prem CA

I'm trying to crack the following nut: I have a contract with Digicert for S/MIME certificates for my org. Digicert allows to use their API for cert issuance. Unfortunately I can't let users self-...
1
vote
0answers
377 views

Digital Signature is not valid

I recently received a digital signed email from a friend and the certificate is issued by COMODO RSA Client Authentication and Secure Email. My problem is the thunderbird detect it as a "Not Valid ...
1
vote
0answers
296 views

Replying to a digitally signed email using thunderbird

So Basically I sent a digitally signed email using a certificate issued by Sectigo RSA Client Authentication and Secure Email CA. Now the recipient of the email replied to me with a certificate ...
1
vote
1answer
464 views

Use of S/MIME capabilities attribute

If you examine an S/MIME-signed file with $ openssl cms -in file.sgn -noout -cmsout -print you see that S/MIME capabilities are also included in the signature: ... object: S/MIME Capabilities (1.2....
1
vote
0answers
486 views

How should an ISP approach Mutual Auth TLS for SMTP email? (Domain Auth Email)

I'm looking for an easy to deploy way to make email clients (MUAs) display my email messages in a secure manner. PGP and SMIME both do this today, but they are high touch, and require software or ...
1
vote
0answers
720 views

Distribute S/MIME public keys and CA cert for email security

I have my own CA. I want to distribute S/MIME certificates for 10 different users. I saw S/MIME keyservers from http://wiki.cacert.org/KeyServers, but I don't want to use public servers. What is the ...
1
vote
1answer
141 views

Automatically import/deploy/distribute private key to users for use with S/MIME

it is an Environment with Microsoft Active Directory, Exchange and Windows/Outlook as Client. Now there are the users which have their own private certificates to send signed mails and encrypt ...
0
votes
0answers
34 views

What usually happens to the symmetric (session) key after decrypting an email? Can the key be recovered if changing private keys?

I've been preparing for a CISSP exam and was reading about applied cryptography in regard to email. It's my understanding that the popular schemes (PGP,S/Mime) use a combination of asymmetric and ...
0
votes
0answers
35 views

How to efficiently deploy SMIME email certificates for entire domain with Google GSuite?

Google Suite Enterprise supports centralized SMIME email signatures. This allows for easy deployment across all devices. But besides an API, there's apparently no central management. And I couldn't ...
0
votes
1answer
100 views

Force specific encryption cipher for S/MIME mails

I have a number of contacts who can only decrypt 3DES, when it comes to S/MIME encrypted mails. I'm aware that this is by far not ideal, but better than no encryption at all. My problem is, that I ...
0
votes
0answers
45 views

Email signature with PKCS11?

While S/MIME has been a PKCS7 standard, what happens while I sign/encrypt an email using a smart card implementing PKCS11? Is PKCS7 supported as kind of backward compatibility?
0
votes
0answers
26 views

Does SMIME 4, or any prior version, support multiple private keys for a single individual?

I am investigating S/MIME and if it's possible to have a device-specific signing key (or if that's a good idea). The intention is to reduce risk by making the private key read only on the device(es) ...
0
votes
0answers
1k views

Using a PowerShell Self-Signed Certificate for Outlook S/MIME

I'm testing out a way that myself and a few others could use S/MIME for our email traffic. I'm using Outlook 2016 with Win10. I have generated my test certificate with the following command in ...
0
votes
0answers
41 views

hashing algorithm mail signing

What determines the hashing algorithm used form mail signing? I sign an mail. it is first run through a hashing algorithm and next encrypted with my private key. Bob, the receiver will decrypt it with ...
0
votes
0answers
54 views

What public key systems allow for delegation?

I am looking for a public key system that allows for a 3rd party to use that key for other purposes. What private key systems allow for this? PGP, S/MIME, PKI?