mailer certificate retrieval via LDAP?

2006-06-09 Thread Steven M. Bellovin
Are there any common mailers -- open source preferred but not mandatory -- that can query LDAP directories to retrieve X.509 certificates for use in S/MIME messages? Evolution and Thunderbird are both able to send S/MIME, but don't seem to have any easy certificate retrieval mechanisms.

Re: UK Detects Chip-And-PIN Security Flaw

2006-06-09 Thread Anne Lynn Wheeler
Anne amp; Lynn Wheeler wrote: for even more drift ... a news item from later yesterday UK Detects Chip-And-PIN Security Flaw http://www.cardtechnology.com/article.html?id=20060606I2K75YSX APACS says the security lapse came to light in a recent study of the authentication technology used in

UK Banks Expected To Move To DDA EMV Cards

2006-06-09 Thread Anne Lynn Wheeler
UK Banks Expected To Move To DDA EMV Cards http://www.epaynews.com/index.cgi?survey=ref=browsef=viewid=11497625028614136145block= ... from above ... Of the 6.2 billion card transactions in the UK each year, one in five occurs offline, which increases the risk of cloned cards being used at a

Re: Status of attacks on AES?

2006-06-09 Thread Max
On 6/8/06, Steven M. Bellovin [EMAIL PROTECTED] wrote: You say you have a method to evaluate ciphers. Without full details, no one can form their own judgment if it's valid or not. (My proposal clearly isn't valid.) You say you've evaluated AES and other ciphers. Without full details, we

Re: U. Washington Crypto Course Available Online For Free

2006-06-09 Thread John R. Black
Oops, I forgot about Neal! :embarrassed: He's a top-notch mathematician, has a couple of books on crypto (or crypto-related topics) and even wrote a controversial article with Menezes recently that was discussed on this mailing list. But I don't think he teaches a crypto class at UW?! On

Re: U. Washington Crypto Course Available Online For Free

2006-06-09 Thread John R. Black
It is taught by good people, but I find it a bit strange they are all Microsoft employees. This is perhaps because U. Wash doesn't have any cryptographers. I hardly think that you can discount the skills of Josh Beneloh and Brian LaMacchia. Who is discounting? I said they are good

Re: U. Washington Crypto Course Available Online For Free

2006-06-09 Thread Greg Rose
At 16:29 -0600 2006/06/08, John R. Black wrote: It is taught by good people, but I find it a bit strange they are all Microsoft employees. This is perhaps because U. Wash doesn't have any cryptographers. I hardly think that you can discount the skills of Josh Beneloh and Brian

Re: mailer certificate retrieval via LDAP?

2006-06-09 Thread Victor Duchovni
On Thu, Jun 08, 2006 at 02:32:01PM -0400, Steven M. Bellovin wrote: Are there any common mailers -- open source preferred but not mandatory -- that can query LDAP directories to retrieve X.509 certificates for use in S/MIME messages? Evolution and Thunderbird are both able to send S/MIME,

Re: mailer certificate retrieval via LDAP?

2006-06-09 Thread Jeff . Hodges
You should consider also posting your query to ldap@umich.edu JeffH - The Cryptography Mailing List Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]

whole load of new RFCs announced yesterday on LDAP and SASL

2006-06-09 Thread Anne Lynn Wheeler
possibly fastest way of getting sense of all the new rfcs is to go to http://www.garlic.com/~lynn/rfcietff.htm and click on Date in the RFCs listed by section. Clicking on each individual RFC number (in the june section) will bring up that RFC summary in the lower frame. Clicking on the

Re: mailer certificate retrieval via LDAP?

2006-06-09 Thread Alex Iliev
On Thu, Jun 08, 2006 at 02:32:01PM -0400, Steven M. Bellovin wrote: Are there any common mailers -- open source preferred but not mandatory -- that can query LDAP directories to retrieve X.509 certificates for use in S/MIME messages? Evolution and Thunderbird are both able to send S/MIME,