HI, Sorry to butt in on this little talk, but I'm finding something really hard to follow here and clarification is appreciated.
S/MIME support for the latest release of NS, the 'default' install doesn't include it, but if I add the PSM will this sort all my woes out? I've checked the security draft mentioned and also checked the roadmaps for the various PSM's, but I'm still way out in the left field on this issue... My understanding of the situation is that NS6.2 is built on top of the Mozilla goodies, and seeing as though S/MIME aint supported in Mozilla, it isn't going to be in NS6.2, but when I look at the draft discussed in this thread I see all these nice icons etc. and I get confused! NS 6.2 (aesthetically) is looking good, but S/MIME support is crucial right now, and any tips on how to enable it are welcome. Thanks for listening ; ) Gervase Markham wrote: > > Please post comments to the mail-news and crypto newsgroups. > > > 1. "Sign" icon in status bar of Mail Compose Windows. > > I think a pen icon, by analogy with the lock icon, is good UI. Pen and > Lock - signature verified, message was also encrypted. Just pen - just a > verified signature. Etc. > > > * Conflicts with SSL lock icon? > > I don't think so - it's fair that this is contextual. In a Compose > window, the lock obviously applies to the message being sent. In the > 3-pane, it applies to the message being read. > > Every time a new recipient is added, we see if that person has a cert; > if they don't, and the lock is closed, open it. > > > 1. If you have certs for some recipients but not for others, no > > one can receive the message encrypted? > > This seems sensible. If you have a half-and-half method, you've lost all > your security as insecure copies of the message escape onto the Net. > There's a danger of users sending a message thinking all copies are > encrypted but some aren't. > > The design looks pretty good. I also think the UI will be quite easily > adaptable to PGP. > > Is the space in the address book for the cert generic enough to hold a > PGP public key? > > Gerv -- Jason Barr Vendor Manager Thawte Tech Support www.thawte.com/cgi/support/contents.exe
