Hello, --On Juli 22, 2007 14:22:42 +0000 nobody <[EMAIL PROTECTED]> wrote:
On Fri, 20 Jul 2007 21:38:47 +0200 Goetz Babin-Ebell <[EMAIL PROTECTED]> wrote:--On Freitag, Juli 20, 2007 14:49:54 +0000 nobody <[EMAIL PROTECTED]> wrote: [...] > Then I exported it in pkcs12 format and imported it into Internet > Explorer and Thunderbird. I've sent encrypted and signed mails with > Thunderbird and Outlook, they verify and decrypt fine at the other > end but neither Outlook nor Thunderbird ask for a password when I'm > creating or reading mails! How do I make sure unauthorised people > can't use this cert? Tell your program you use to send mails that it should protect imported key data with a pass phrase. How to do that is outside the scope of this list. (In Thunderbird it is the master pass phrase, I don't care for Outluck...)Hi, Thunderbird and Outlook don't ask for any key data at all for these certs! I don't see how I can create a cert that needs a password to use it.
You don't protect the certificate. That would be useless, since the certificate is public information. You protect the private key. If you use the certificate for client authentication you need the private key, and if the private key is passphrase protected, indirectly the certificate becomes passphrase protected. Bye Goetz -- DMCA: The greed of the few outweights the freedom of the many
pgp2otn5ePDku.pgp
Description: PGP signature
