30 likes | 194 Views
S/MIME Email and PKI. Dartmouth College PKI Lab. RFC 2633 (S/MIME Version 3) Extensions to MIME Uses PKI certificates, keys, and cryptography to give standard email: Digital signatures Encryption (for recipient’s eyes only) Mature standard Supported by most popular email clients
E N D
S/MIME Email and PKI Dartmouth College PKI Lab
RFC 2633 (S/MIME Version 3) Extensions to MIME Uses PKI certificates, keys, and cryptography to give standard email: Digital signatures Encryption (for recipient’s eyes only) Mature standard Supported by most popular email clients No server support required What Is S/MIME?
S/MIME and Certificates • Standard X.509 certificates with proper usage bits and correct email address • Need certificates for signing and for encryption • Can be same certificate with both signing and encryption capabilities • Challenge: how to get encryption certificates for other users • Email from other users • Directories • Address books • Automatic retention