RE: Signing on behalf of somebody else

"William Ottaway" <w.ottaway@eris.dera.gov.uk> Wed, 18 July 2001 09:56 UTC

From: William Ottaway <w.ottaway@eris.dera.gov.uk>
To: Rahul Banerjee <rahul@bits-pilani.ac.in>, Nagaraj Mandya <nmandya@yahoo.co.in>, ietf-smime@imc.org
Subject: RE: Signing on behalf of somebody else
Date: Wed, 18 Jul 2001 10:40:55 +0100
Message-ID: <NABBJNEAKNOGJBHIOCBHEELHDPAA.w.ottaway@eris.dera.gov.uk>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Importance: Normal
In-Reply-To: <01f301c10f6c$703dfdc0$4201a8c0@blueeighteen>
Sender: owner-ietf-smime@mail.imc.org
Precedence: bulk
Content-Transfer-Encoding: 7bit

Rahul,

DOMSEC also allows for another person to sign a message, as in the case when
you have a release authority. This could be an individual who verifies that
the message can be released.

Bill.

> -----Original Message-----
> From: Rahul Banerjee [mailto:rahul@bits-pilani.ac.in]
> Sent: 18 July 2001 10:32
> To: William Ottaway; Nagaraj Mandya; ietf-smime@imc.org
> Subject: Re: Signing on behalf of somebody else
>
>
> Hi,
>
> A Company-specific signature is definitely acceptable. I guess, Nagraj's
> question related to signing on behalf of another individual  ----
> and, this
> had security implications.
>
> Regards.
>
> Rahul
> ----- Original Message -----
> From: "William Ottaway" <w.ottaway@eris.dera.gov.uk>
> To: "Nagaraj Mandya" <nmandya@yahoo.co.in>; <ietf-smime@imc.org>
> Sent: Wednesday, July 18, 2001 01:40 PM
> Subject: RE: Signing on behalf of somebody else
>
>
> >
> > Hi Nagaraj,
> >
> > Have you looked at the DOMSEC draft?
> > http://www.ietf.org/internet-drafts/draft-ietf-smime-domsec-08.txt
> >
> > It allows for others to sign a message. It also specifies a
> domain/company
> > signature. A valid company signature means the message can be accepted
> > irrespective of whether there is an originator signature or not.
> >
> > Bill.
> >
> > > -----Original Message-----
> > > From: owner-ietf-smime@mail.imc.org
> > > [mailto:owner-ietf-smime@mail.imc.org]On Behalf Of Nagaraj Mandya
> > > Sent: 18 July 2001 05:13
> > > To: ietf-smime@imc.org
> > > Subject: Signing on behalf of somebody else
> > >
> > >
> > >
> > > Hi,
> > >    Is it possible for a mail being sent by one person
> > > be signed by a different person and still be treated
> > > as a valid signature?
> > >
> > >    My problem is like this. Any mail that a client
> > > receives signed by a particular person's certificate
> > > should be considered valid by the client irrespective
> > > of who the actual sender is.
> > >
> > >    Thanks.
> > > --
> > > Regards,
> > > Nagaraj
> > >
> > > ____________________________________________________________
> > > Do You Yahoo!?
> > > For regular News updates go to http://in.news.yahoo.com
> >
>

Signing on behalf of somebody else Nagaraj Mandya
Re: Signing on behalf of somebody else Rahul Banerjee
RE: Signing on behalf of somebody else William Ottaway
Re: Signing on behalf of somebody else Rahul Banerjee
RE: Signing on behalf of somebody else William Ottaway
Re: Signing on behalf of somebody else David P. Kemp
Re: Signing on behalf of somebody else Anders Rundgren