Notes S/MIME and signed CD mails

by Volker Weber

You may remember that I was having difficulties receiving S/MIME message signed by Notes on the BlackBerry Internet Service. This has now been resolved. BIS 2.1 can read the format that Notes creates.

While testing this we have found an interesting situation. Depending on your setup, Notes will notify you that your message is being signed, but in fact it is not delivered as an S/MIME message. In the comments to my post Things that annoy me about Lotus Notes, part 4328 we have worked out that there are two ways to convert from Notes Rich Text to MIME: One option is to do it in the Notes client, and you will end up with the ugly HTML that was annoying me. The other option is to let the server convert from CD format to MIME and that will render the message in decent HTML code. Now we have determined that this option strips you from your ability to clear sign your messages with your X.509 private key.

Actually this is not even surprising since the message travels to the server and is converted there to MIME. As the server does not have your private key, it cannot sign this MIME-encoded message. The status notification in Notes says, the message is being signed. This information is correct, but at the same time completely useless, since the message is signed with your Notes private key, which is then stripped at the server when the message is converted to MIME.

Comments

There is another option: You can have the server sign mail on behalf of you. We have a product which signs messages on the server and also encrytps in- and outgoing messages there: BCC_MailProtect powered by Cerberus.

Andreas Kruemmel, 2006-10-16

This is the reason why Domino 7 has the policy option to add a disclaimer on the Notes client side (regardless if it works or not) instead of enforcing it at server side. Latter would break the encryption.

To balance the advertisement of products (done in other comments)
Of cause there are products on the market. Group technologies has IQ.Suite (IQ.Crypt), BCC was already advertised.

Christian Henseler, 2006-10-16

Christian, wouldn't you think it is up to me to "balance advertisement"? Where do you want me to send the invoice?

Volker Weber, 2006-10-16

Recent comments

Hilbert Trekel on Why Apple AirPods Came to Be Everywhere :: GQ at 17:54
Frank Stoermer on Why Apple AirPods Came to Be Everywhere :: GQ at 12:48
Frank Stoermer on Why Apple AirPods Came to Be Everywhere :: GQ at 12:45
Volker Weber on Why Apple AirPods Came to Be Everywhere :: GQ at 12:28
Volker Weber on Why Apple AirPods Came to Be Everywhere :: GQ at 12:26
Hilbert Trekel on Why Apple AirPods Came to Be Everywhere :: GQ at 10:08
Alexander Siemes on Why Apple AirPods Came to Be Everywhere :: GQ at 02:37
Volker Weber on Why Apple AirPods Came to Be Everywhere :: GQ at 23:13
Hilbert Trekel on Why Apple AirPods Came to Be Everywhere :: GQ at 23:07
Bastian Anthon on Why Apple AirPods Came to Be Everywhere :: GQ at 21:33
Volker Weber on The Apple Watch keeps me hooked at 19:12
Manfred Wiktorin on The Apple Watch keeps me hooked at 18:42
Armin Auth on Lange erwartet :: Neue AirPods at 15:24
Jochen Schug on Lange erwartet :: Neue AirPods at 17:59
Michael Hertlein on Lange erwartet :: Neue AirPods at 14:53
Patrick Bohr on Lange erwartet :: Neue AirPods at 11:00
Roland Dressler on Lange erwartet :: Neue AirPods at 10:43
Arne Sigurd Rognan Nielsen on Now is a good time to buy a new iMac at 10:40
Frank Köhler on Lange erwartet :: Neue AirPods at 18:55
Jochen Schug on Lange erwartet :: Neue AirPods at 17:28
Michael Hertlein on Lange erwartet :: Neue AirPods at 16:52
Friedrich Holstein on Lange erwartet :: Neue AirPods at 16:41
Volker Weber on Lange erwartet :: Neue AirPods at 14:43
Michael Hertlein on Lange erwartet :: Neue AirPods at 13:44
Stefan Kremer on Lange erwartet :: Neue AirPods at 12:44

Ceci n'est pas un blog

I explain difficult concepts in simple ways. For free, and for money. Clue procurement and bullshit detection.

vowe

Contact
Publications
Stuff that works
Amazon Wish List
Frequently Asked Questions

rss feed  twitter  amazon

Local time is 18:04

visitors.gif

buy me coffee

Paypal vowe