Wolfgang Eibner wrote:
"Bob Relyea" <[EMAIL PROTECTED]> wrote:
Just to get this straight:

1. You have a CD with *encrypted* content (the content is already encrypted on the CD). 2. You wish to browse to that content using the file:// url to read the content. 3. The content is encrypted for a particular user based on a certificate that user already holds.

Yes, except of 3.) The certificate should be delivered to the user with the cd. But this wouldn't be the problem, I think.
Ah... you would need to deliver the certificate and the key. Anyone can encrypt with a certificate, but only the person with the private key can decrypt. In that case there is not much point to encrypting since anyone with the CD would also have the key to decrypt the data.

If the user is 'ordering' the content on-line, it would be fairly easy to have the user generate a key and send you a certificate request. Then you would only need to include the certificate on the CD, but in that case it may be easier to have the user give you a certificate he already has.
If all three of these holds true, then you can accomplish this goal without changes to firefox. Simply wrap your html message in mime headers and encode them with cms (S/MIME). You will need the certificate of the user or users you are encrypting to to make the content. You will need to make sure your CD content maps the the mime type application/x-pkcs7-mime. I believe firefox recognizes this mime-type (since it shares this part of the code with thunderbird).

Thanks for this answer, I''ll try!

_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to