Certificate directorys

lst_hoe02(a)kwsoft.de wrote:

There are some other questions to solve:
- Should this be public available or Djigzo/Sign-in only?

I think it should be publicly available.

> - It should only allow full e-mail address direct matching, no wildcards
> etc. to prevent address harvesting

Yes, protecting email addresses is important.

But beside this it would solve one of the biggest S/MIME problems today.
It would be somewhat similar to the mentioned www.bridge-ca.org, but
without paied membership?

Our view is that email encryption can only be a success when it becomes
a commodity so I think that such feature should be freely accessible.

Kind regards,

Martijn

ยทยทยท

--
Djigzo open source email encryption

Zitat von Martijn Brinkers <martijn(a)djigzo.com>:

lst_hoe02(a)kwsoft.de wrote:

There are some other questions to solve:
- Should this be public available or Djigzo/Sign-in only?

I think it should be publicly available.

> - It should only allow full e-mail address direct matching, no wildcards
> etc. to prevent address harvesting

Yes, protecting email addresses is important.

But beside this it would solve one of the biggest S/MIME problems today.
It would be somewhat similar to the mentioned www.bridge-ca.org, but
without paied membership?

Our view is that email encryption can only be a success when it becomes
a commodity so I think that such feature should be freely accessible.

Would be nice to have, no question. If it is possible for you guys to
cover the costs with a freely available service this is for sure a
must have :wink:

Regards

Andreas

Zitat von Martijn Brinkers <martijn(a)djigzo.com>:

Our view is that email encryption can only be a success when it becomes
a commodity so I think that such feature should be freely accessible.

There is really a long way to go. We received today the following
(correspondingly) answer from a german bank to our inquiry to use
S/MIME further on to secure confidential mail:

"The requested way to secure mail is not wide-spread today and we
therefore do not support it. We use the follwoing with our Business
Partners: Include all sensible data in an encrypted ZIP-Archiv
(AES-256) and send the information attached to the mail."

This was from the CIO of the IT department of the bank :frowning:
-No further comment-

Regards

Andreas