RE: PKI and S/MIME

"Blake Ramsdell" <blake@brutesquadlabs.com> Fri, 15 August 2003 23:45 UTC

From: Blake Ramsdell <blake@brutesquadlabs.com>
To: 'Steve Hole' <steve.hole@messagingdirect.com>, 'Simon Josefsson' <jas@extundo.com>
Cc: ietf-smime@imc.org
Subject: RE: PKI and S/MIME
Date: Fri, 15 Aug 2003 16:09:16 -0700
Message-ID: <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAARMPfbnbp50SwK3EZjypY2MKAAAAQAAAAH4t24m9h4UGrhgZ02LFC+wEAAAAA@brutesquadlabs.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Importance: Normal
In-Reply-To: <EXECMAIL.20030815095002.A1437@kepler.esys.ca>
Sender: owner-ietf-smime@mail.imc.org
Precedence: bulk
Content-Transfer-Encoding: 7bit

> -----Original Message-----
> From: owner-ietf-smime@mail.imc.org 
> [mailto:owner-ietf-smime@mail.imc.org] On Behalf Of Steve Hole
> Sent: Friday, August 15, 2003 9:50 AM
> To: Simon Josefsson
> Cc: ietf-smime@imc.org
> Subject: Re: PKI and S/MIME
> 
> On Fri, 15 Aug 2003 01:41:22 +0200 Simon Josefsson 
> <jas@extundo.com> wrote:
> 
> > But this isn't an important point, and I don't see anything that can
> > be seen as a _disadvantage_ for DNS compared to LDAP or XKMS here.
> > Perhaps this tangental issue only distract us from the big picture.
> 
> Agreed.   I think that the provision of a simple-to-use API 
> would be a 
> huge help here.

I thought I published this at one point, though it might have been
internal only.  I'll use a somewhat Java-ish syntax here.

EncryptingInformation
findInformationRequiredForEncryptingForEmailAddress(
    String emailAddress
    );

boolean
isCertificateSuitableForSigningEmail(
    String emailAddress,
    X509Certificate signingCertificate,
    X509CertificateList otherCertificates,
    CRLList cRLs
    );


EncryptingInformation contains:

1. Any cached SMIMECapabilities

2. An X.509 certificate for encrypting


OK, now we just fill in the details ;).

Blake

PKI and S/MIME Blake Ramsdell
Re: PKI and S/MIME Simon Josefsson
Re: PKI and S/MIME Anders Rundgren
RE: PKI and S/MIME Blake Ramsdell
Re: PKI and S/MIME Simon Josefsson
Re: PKI and S/MIME Simon Josefsson
DNS CERT vs. LDAP (was: RE: PKI and S/MIME) Blake Ramsdell
RE: PKI and S/MIME Hallam-Baker, Phillip
Re: PKI and S/MIME Steve Hole
RE: PKI and S/MIME Steve Hole
Re: PKI and S/MIME Steve Hole
RE: PKI and S/MIME Steve Hole
RE: PKI and S/MIME Hallam-Baker, Phillip
RE: PKI and S/MIME Blake Ramsdell
Re: PKI and S/MIME Simon Josefsson
RE: PKI and S/MIME Blake Ramsdell
Re: PKI and S/MIME Steve Hole
Re: PKI and S/MIME Simon Josefsson
Re: PKI and S/MIME Steve Hole
RE: PKI and S/MIME Blake Ramsdell
Re: PKI and S/MIME Denis Pinkas
RE: PKI and S/MIME Hallam-Baker, Phillip
Re: PKI and S/MIME Denis Pinkas