OT: Email signing

Arthur Pemberton pemboa at gmail.com
Tue Jan 31 05:36:51 UTC 2006


On 1/30/06, Gordon Messmer <yinyang at eburg.com> wrote:
>
> Arthur Pemberton wrote:
>
> >
> > Could someone briefly fill me in on the if, why and how of email
> > signing (I do not mean signatures). I am sure I can google the how,
> > but I would like opions and experiences.
>
>
> OK, I presume that you mean cryptographic signing.  Message signing can
> be done with either SMIME or PGP.  Both accomplish the same thing, and
> operate in virtually the same way.
>
> Why sign?  It's all about trust.  If you reliably sign your messages,
> the people with whom you exchange messages can configure their mail
> client to trust the fingerprint of your certificate (or, they may trust
> someone who signed your certificate).  They can trust that a message
> with your name on it, which has a valid signature, was written by you
> and has not been tampered with.  They should also learn not to trust
> messages that have your name on it, but no signature.
>
> Which method you choose probably will be influenced most by who,
> exactly, you want to be able to verify your signatures.  SMIME uses, in
> large part, the same infrastructure that is already in virtually every
> mail client to support SSL connections.  That's one of the reasons that
> SMIME is supported by nearly every major mail client available, out of
> the box.  PGP does pretty much exactly the same thing, but requires an
> entirely separate infrastructure.  I'm not aware of any major client
> that supports PGP by default; they require plugins, mostly.  That gives
> SMIME a significant advantage if you want to sign messages, and have
> that information be useful to a wide audience.


Thanks.  That's exactly what I wanted to know.  I wanted to know before I
put in the effor to encoperate signing into my emails.
Two questions for now:

1) Can I do both SMIME and PGP in my emails?
2) What happens when the receiving client can't read the signature?

--
As a boy I jumped through Windows, as a man I play with Penguins.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20060130/ab958083/attachment-0001.htm>


More information about the fedora-list mailing list