ietf-smime
[Top] [All Lists]

Re: Request: Send me signed messages

2004-07-19 17:31:04



Christine Karman wrote:

At 09:43 PM 7/16/2004, Ed Gerck wrote:

An obvious problem with email certificates is that they open us to spam.


How's that?

A repository of certs with email addresses is a repository of email addresses.

If you accept encrypted email, then you can refuse unsigned email.

You can do the latter without doing the former. Beseides, while it's relatively 
easy
to send signed email to many people (as it depends only on your cert), in order
to send encrypted email to many people you need each recipient's cert (and you 
also
want to make sure they are not revoked at the time they receive the message, 
which
is yet another problem).

Cheers,
Ed  Gerck