Welcome to the MacNN Forums.

Diggory Laycock · Oct 30, 2003, 05:21 AM

Has anyone else tried this page:

http://joar.com/certificates/

It shows how to get your own personal certificate for Mail in Panther.

I got the certs into Keychain - but Mail does not offer me the Signing or Encrypting options - anyone have any ideas?

Mathieu · Oct 30, 2003, 05:28 AM

Works just fine for me.

Mail only shows the SIGN icon because none of my contacts has a S/MIME key yet.

This is a GREAT feature: I didn't know that getting a certificate was free. Goodbye GnuPG: S/MIME is much more standard for emails and none of my contacts will have to install a PGP plugin to check my signatures.

Diggory Laycock · Oct 30, 2003, 05:32 AM

Originally posted by Mathieu:
Works just fine for me.

Mail only shows the SIGN icon because none of my contacts has a S/MIME key yet.

This is a GREAT feature: I didn't know that getting a certificate was free. Goodbye GnuPG: S/MIME is much more standard for emails and none of my contacts will have to install a PGP plugin to check my signatures.

Would you send me a test signed message to me (my first name @ my first name dot net)?

Then I can see if I have it correctly set up.
Thanks.

Diggory Laycock · 06:07 AM

Thanks - Signed, Sealed and Delivered!

[edit] - Note to anyone else having problems - The Email address you use is case-sensitive - so the email address in mail *must* match the case of the email that you give to Thawtes.

e.g. foo@bar.com does not equal Foo@Bar.com

Xeo · Oct 30, 2003, 08:11 AM

Just signed up for this myself. Now it's time to get notarized!

Xeo · 12:19 PM

Originally posted by Diggory Laycock:
[edit] - Note to anyone else having problems - The Email address you use is case-sensitive - so the email address in mail *must* match the case of the email that you give to Thawtes.

e.g. foo@bar.com does not equal Foo@Bar.com

Good info. This is one reason I only use lower case e-mail addresses anyhow.

[edit] With me not knowing exactly how these certificates work, I have a question. Is it possible for Apple to include support for these into iChat so we can communicate securely? Fire implements GPG Key support, which is nice, but it'd be even better if Apple could implement something like this, that already works with Mail, to make communications secure.

Xeo · Oct 31, 2003, 12:30 AM

<bump>

Since I edited my last post with this question hours after I initially posted, I'm thinking it disappeared without anyone reading it. So here it is:

With me not knowing exactly how these certificates work, I have a question. Is it possible for Apple to include support for these into iChat so we can communicate securely? Fire implements GPG Key support, which is nice, but it'd be even better if Apple could implement something like this, that already works with Mail, to make communications secure.

Any thoughts?

Diggory Laycock · Oct 31, 2003, 04:54 AM

http://www.unsanity.org/archives/000250.php

dscottbuch · Nov 2, 2003, 05:34 PM

Originally posted by Diggory Laycock:
Has anyone else tried this page:

http://joar.com/certificates/

It shows how to get your own personal certificate for Mail in Panther.

I got the certs into Keychain - but Mail does not offer me the Signing or Encrypting options - anyone have any ideas?

I've generated my own, self-signed, certs using the openssl and CA.pl programs provided with OSX. They appear in the Keychain just fine but no icons in Mail to allow to use them. My e-mail match exactly. Any ideas? Where can I go to figure this out?

Thanks,

sweetsdream · Nov 2, 2003, 06:54 PM

I thought is was pretty easy. I just need to get other people to sign up for the service and send me their keys so I can try the encrypting.

I finally got my father to switch from Windows and he is using Entourage. I think he will have to get PGP or something to use my signature. Anyone have any experience with this?

parsec · Nov 2, 2003, 07:32 PM

Originally posted by sweetsdream:
I thought is was pretty easy. I just need to get other people to sign up for the service and send me their keys so I can try the encrypting.

I finally got my father to switch from Windows and he is using Entourage. I think he will have to get PGP or something to use my signature. Anyone have any experience with this?

no experience, except having worked for several months researching windows PKI solutions and having taken a university level applied cryptography course.
I've never used Entourage, but PGP is totally different from S/MIME and a half-assed google search seemed to indicate that entourage doesn't do s/mime. So you'll either have to get him to use Mail.app or another s/mime compliant email client, or else both start using pgp or gpg (don't know how well entourage supports either of those)

parsec