On Sat, Jun 21, 2014 at 07:03:44AM +0200, Greg wrote: > On 20/6/14, 22:50 , Kurt Roeckx wrote: > > Are you actually sending all those certificates together with > > message? > > No, the message is signed only with the personal certificate. The > recipient's mail client shows the unknown-authority message. > > I wonder if it's possible Comodo has updated the intermediate certificates > for their free S/MIME certs, but forgotten to distribute them to mail client > providers.
The client is supposed to send the whole certificate chain to the receiving side. The receiving side should only know the root certificates and should have gotten all other needed certificates from the sender. I've never tried to do this with thunderbird so I have no idea how to set it up. But in any case this so far looks like either a misconfiguration or a bug in thunderbird. Kurt _______________________________________________ dev-security-policy mailing list dev-security-policy@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security-policy
