Re: S/MIME Encryption Certificate without email address

2011-03-23 Thread silent...@gmail.com
On Mar 22, 11:34 pm, Robert Relyea wrote: > On 03/22/2011 03:09 PM, silent...@gmail.com wrote: > > > > > > > > > Thank you for the reply! > > > On Mar 22, 7:00 pm, Robert Relyea wrote: > >> Unless there is an authoritative way to bind the cert t

Re: S/MIME Encryption Certificate without email address

2011-03-22 Thread silent...@gmail.com
Thank you for the reply! On Mar 22, 7:00 pm, Robert Relyea wrote: > Unless there is an authoritative way to bind the cert to a given email > address, there is no way to use those certs for email. If you want email > certs to interoperate with people from outside of the infrastructure, > the only

Re: S/MIME Encryption Certificate without email address

2011-03-22 Thread silent...@gmail.com
able to support encryption or having an option that enables or disables verification of email addresses in certificates would make sense. Best regards, Sergei Evdokimov On Mar 21, 5:54 am, Nelson B Bolyard wrote: > On 2011/03/17 02:41 PDT, silent...@gmail.com wrote: > > > It seems that T

S/MIME Encryption Certificate without email address

2011-03-17 Thread silent...@gmail.com
It seems that Thunderbird refuses to use X.509 certificates for S/MIME encryption when these certificates do not contain email address of the subject. We want to use S/MIME with keys stored on smart cards and certificates distributed via LDAP. For obvious reasons we cannot attach certificates to fi