Re: Signing on behalf of somebody else

"Rahul Banerjee" <rahul@bits-pilani.ac.in> Wed, 18 July 2001 09:53 UTC

Received: from above.proper.com (above.proper.com [208.184.76.39]) by ietf.org (8.9.1a/8.9.1a) with SMTP id FAA12366 for <smime-archive@odin.ietf.org>; Wed, 18 Jul 2001 05:53:17 -0400 (EDT)
Received: from localhost (localhost [[UNIX: localhost]]) by above.proper.com (8.11.3/8.11.3) id f6I9Vxo22839 for ietf-smime-bks; Wed, 18 Jul 2001 02:31:59 -0700 (PDT)
Received: from asura.bits-pilani.ac.in (IDENT:root@[202.54.26.114]) by above.proper.com (8.11.3/8.11.3) with ESMTP id f6I9Vuq22833 for <ietf-smime@imc.org>; Wed, 18 Jul 2001 02:31:56 -0700 (PDT)
Received: from blueeighteen (devil.bits-pilani.ac.in [202.54.26.125]) by asura.bits-pilani.ac.in (8.9.3/8.9.3) with SMTP id PAA10543; Wed, 18 Jul 2001 15:01:01 +0530
Message-ID: <01f301c10f6c$703dfdc0$4201a8c0@blueeighteen>
From: Rahul Banerjee <rahul@bits-pilani.ac.in>
To: William Ottaway <w.ottaway@eris.dera.gov.uk>, Nagaraj Mandya <nmandya@yahoo.co.in>, ietf-smime@imc.org
References: <NABBJNEAKNOGJBHIOCBHEELGDPAA.w.ottaway@eris.dera.gov.uk>
Subject: Re: Signing on behalf of somebody else
Date: Wed, 18 Jul 2001 15:01:35 +0530
Organization: BITS, Pilan (India)
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4522.1200
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
Sender: owner-ietf-smime@mail.imc.org
Precedence: bulk
List-Archive: <http://www.imc.org/ietf-smime/mail-archive/>
List-ID: <ietf-smime.imc.org>
List-Unsubscribe: <mailto:ietf-smime-request@imc.org?body=unsubscribe>
Content-Transfer-Encoding: 7bit

Hi,

A Company-specific signature is definitely acceptable. I guess, Nagraj's
question related to signing on behalf of another individual  ---- and, this
had security implications.

Regards.

Rahul
----- Original Message -----
From: "William Ottaway" <w.ottaway@eris.dera.gov.uk>
To: "Nagaraj Mandya" <nmandya@yahoo.co.in>; <ietf-smime@imc.org>
Sent: Wednesday, July 18, 2001 01:40 PM
Subject: RE: Signing on behalf of somebody else


>
> Hi Nagaraj,
>
> Have you looked at the DOMSEC draft?
> http://www.ietf.org/internet-drafts/draft-ietf-smime-domsec-08.txt
>
> It allows for others to sign a message. It also specifies a domain/company
> signature. A valid company signature means the message can be accepted
> irrespective of whether there is an originator signature or not.
>
> Bill.
>
> > -----Original Message-----
> > From: owner-ietf-smime@mail.imc.org
> > [mailto:owner-ietf-smime@mail.imc.org]On Behalf Of Nagaraj Mandya
> > Sent: 18 July 2001 05:13
> > To: ietf-smime@imc.org
> > Subject: Signing on behalf of somebody else
> >
> >
> >
> > Hi,
> >    Is it possible for a mail being sent by one person
> > be signed by a different person and still be treated
> > as a valid signature?
> >
> >    My problem is like this. Any mail that a client
> > receives signed by a particular person's certificate
> > should be considered valid by the client irrespective
> > of who the actual sender is.
> >
> >    Thanks.
> > --
> > Regards,
> > Nagaraj
> >
> > ____________________________________________________________
> > Do You Yahoo!?
> > For regular News updates go to http://in.news.yahoo.com
>