[20157] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: NPR : E-Mail Encryption Rare in Everyday Use

daemon@ATHENA.MIT.EDU (Peter Gutmann)
Tue Feb 28 14:42:34 2006

X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
From: pgut001@cs.auckland.ac.nz (Peter Gutmann)
To: alex@alten.org, ben@algroup.co.uk, edgerck@nma.com
Cc: cryptography@metzdowd.com, paul.hoffman@vpnc.org
In-Reply-To: <4.3.2.7.1.20060224195509.0461ad60@mail.alten.org>
Date: Mon, 27 Feb 2006 19:23:36 +1300

Alex Alten <alex@alten.org> writes:

>What I really hated about it was that when fred@company.com sent me an email
>often I couldn't decrypt it.  Why?  Because his firm's email server decided
>to put in the FROM field "fred@server.company.com".  Since it didn't match
>the email name in his X.509 certificate's DN it wouldn't decrypt the S/MIME
>attachment. This also caused problems with replying to his email.  It took us
>hours, with several experimental emails sent back and forth, to figure out
>the root of the problem.

Something's getting lost in this description.  What does the value in the
"From" field have to do with you decrypting a message?  OTOH the mention of an
"attachment" indicates a detached S/MIME signature, which doesn't have
anything to do with encryption.  If it is a signature, then the software
should verify it with the included cert and display that as the signer.

Please correct and resubmit.

Peter.


---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com

home help back first fref pref prev next nref lref last post