Re: YA digitally signed email protocol

2007-12-15 Thread Daniel Dreymann
On Dec 15, 11:01 pm, Nelson Bolyard <[EMAIL PROTECTED]> wrote: > I think not. In a world where non-signed email is discarded, and all > spam is signed, the verified sender identity becomes a basis for the > user to impose reputation filters of their own. Spam me, and I filter > out all future em

Re: YA digitally signed email protocol

2007-12-15 Thread Daniel Dreymann
On Dec 15, 6:45 pm, "Eddy Nigg (StartCom Ltd.)" <[EMAIL PROTECTED]> wrote: > Daniel, sorry to be interruptive, but let me clarify this...your system > has (almost) nothing to do with identity validation, signing and > encryption and is all about fighting spam. Am I correct with this > assumption?

Re: YA digitally signed email protocol

2007-12-15 Thread Nelson Bolyard
Daniel Dreymann wrote, On 2007-12-15 17:26: > The token includes a hash of the message (submitted to us by the > sender), hence each the token is unique and valid for one specific > message only. I see. So it's also a form of rate control, traffic shaping. > The entire body and selected headers

Re: Problem with mp_comba.c assembly code and gcc 4.3 on x86-64

2007-12-15 Thread Wan-Teh Chang
On Dec 15, 2007 4:15 PM, Ismail Dönmez <[EMAIL PROTECTED]> wrote: > > GCC got more strict over the years, compiling for last 10 years doesn't make > your code correct at all. Even with gcc 4.3 we have some new rules for C++ > programs. Let's work on this bug in the NSS bug report: https://bugzilla

Re: YA digitally signed email protocol

2007-12-15 Thread Eddy Nigg (StartCom Ltd.)
Daniel, sorry to be interruptive, but let me clarify this...your system has (almost) nothing to do with identity validation, signing and encryption and is all about fighting spam. Am I correct with this assumption? Daniel Dreymann wrote: -- Regards Signer: Eddy Nigg, StartCom Ltd.

Re: YA digitally signed email protocol

2007-12-15 Thread Eddy Nigg (StartCom Ltd.)
Daniel Dreymann wrote: > > The accreditation is done once (like a CA) but, unlike a CA, we stay > in the loop: we control usage (we dispense the tokens) and monitor > complaints in real time (feeds from the mailbox providers) so we can > take immediate action and shut down a compromised sender. Li

Re: YA digitally signed email protocol

2007-12-15 Thread Eddy Nigg (StartCom Ltd.)
Nelson Bolyard wrote: > Eddy Nigg (StartCom Ltd.) wrote, On 2007-12-13 03:32: > >> Oh wellmaybe I'll come of with yet another standard: >> StartComVerySecureAndGoodEVCompatibleSSL/SMIME >> > > I think that's a great idea, Eddy. Now you just need to do the one > extra thing that Goodma

Re: YA digitally signed email protocol

2007-12-15 Thread Daniel Dreymann
On Dec 15, 3:37 pm, Nelson Bolyard <[EMAIL PROTECTED]> wrote: > Daniel Dreymann wrote, On 2007-12-14 14:41: > > > The embedded certificate is only a tool. CertifiedEmail is a third- > > party signature system. First we accredit senders to establish wether > > they are good players with a good email

Re: Comment on tls-srp enhancement?

2007-12-15 Thread Nelson Bolyard
Steffen Schulz wrote, On 2007-12-12 10:34: > On 071209 at 03:55, Nelson Bolyard wrote: >> If FF doesn't have any built-in UI for SRP, I think I have a harder time >> justifying the inclusion of SRP in NSS. I think it's a feature that >> would be included exclusively for use in the browser, so if t

Re: YA digitally signed email protocol

2007-12-15 Thread Daniel Dreymann
On Dec 15, 7:04 am, Michael Ströder <[EMAIL PROTECTED]> wrote: > Daniel Dreymann wrote: > > > CertifiedEmail is a third- party signature system. First we accredit > > senders to establish wether they are good players with a good email > > reputation. Then, once they are accredited, we certify *indi

Re: Problem with mp_comba.c assembly code and gcc 4.3 on x86-64

2007-12-15 Thread Ismail Dönmez
Sunday 16 December 2007 02:02:48 tarihinde Nelson Bolyard şunları yazmıştı: > Ismail Dönmez wrote, On 2007-12-14 14:49: > > Friday 14 December 2007 04:09:45 tarihinde Nelson Bolyard şunları yazmıştı: > >> Ismail Dönmez wrote: > >>> Hi all, > >>> > >>> Over at Novell bugzilla [0] its reported that

Re: Problem with mp_comba.c assembly code and gcc 4.3 on x86-64

2007-12-15 Thread Nelson Bolyard
Ismail Dönmez wrote, On 2007-12-14 14:49: > Friday 14 December 2007 04:09:45 tarihinde Nelson Bolyard şunları yazmıştı: >> Ismail Dönmez wrote: >>> Hi all, >>> >>> Over at Novell bugzilla [0] its reported that nss fails to build with gcc >>> 4.3 . GCC developer Richard Guenther identified that >>>

Re: YA digitally signed email protocol

2007-12-15 Thread Nelson Bolyard
Eddy Nigg (StartCom Ltd.) wrote, On 2007-12-13 03:32: > Oh wellmaybe I'll come of with yet another standard: > StartComVerySecureAndGoodEVCompatibleSSL/SMIME I think that's a great idea, Eddy. Now you just need to do the one extra thing that GoodmailSystems did: get the webmail providers to

Re: YA digitally signed email protocol

2007-12-15 Thread Eddy Nigg (StartCom Ltd.)
Michael Ströder wrote: > Daniel Dreymann wrote: > >> CertifiedEmail is a third- party signature system. First we accredit >> senders to establish wether they are good players with a good email >> reputation. Then, once they are accredited, we certify *individual* >> messages, >> > > But thi

Re: YA digitally signed email protocol

2007-12-15 Thread Nelson Bolyard
Daniel Dreymann wrote, On 2007-12-14 14:41: > The embedded certificate is only a tool. CertifiedEmail is a third- > party signature system. First we accredit senders to establish wether > they are good players with a good email reputation. Then, once they > are accredited, we certify *individual*

Re: YA digitally signed email protocol

2007-12-15 Thread Michael Ströder
Daniel Dreymann wrote: > > CertifiedEmail is a third- party signature system. First we accredit > senders to establish wether they are good players with a good email > reputation. Then, once they are accredited, we certify *individual* > messages, But this initial accreditation is done once. > i

Re: Terminating SSL on the web proxy

2007-12-15 Thread Florian Weimer
* Robert Relyea: >>> I've seen proposals for this kind of gateway back in the early 90's as >>> a way of providing secure email access for browsers which did not >>> support https:. >>> >> >> IIRC, Netscape 3 or 4 had some kind of "extend trust to proxies" option. >> > Not when it comes to