Re: a new free smime service, but...

2019-10-25 Thread Steffen Nurpmeso
Robert J. Hansen wrote in <7e1208e4-aa1b-2e4c-3b3b-b74901456101@sixdemon\ bag.org>: |> Why doesn't Let's Encrypt offer this service? | |Because it's outside the scope of what Let's Encrypt exists to do, which |is make it easy to provide HTTPS support to small websites. | |SMTP is *totally*

Re: a new free smime service, but...

2019-10-24 Thread Ralph Seichter
* gnupgpac...@on.yourweb.de: > Why doesn't Let's Encrypt offer this service? S/MIME certificates have been repeatedly discussed and rejected in the LE community, pretty much since LE's inception. There even used to be a related FAQ entry. One reason is that LE's self declared goal is to provide

Re: a new free smime service, but...

2019-10-24 Thread Robert J. Hansen
> Why doesn't Let's Encrypt offer this service? Because it's outside the scope of what Let's Encrypt exists to do, which is make it easy to provide HTTPS support to small websites. SMTP is *totally* outside of Let's Encrypt's mission. If you've got a problem with that, take it up with Let's

a new free smime service, but...

2019-10-24 Thread gnupgpacker
So a trustful CA issueing free S/Mime certificates > 3 month and acceptance in major browsers / mail tools is wanted. Why doesn't Let's Encrypt offer this service? https://letsencrypt.org/ Why isn't CAcert after years of participation listed as trusted CA in root stores? http://www.cacert.org/

Re: a new free smime service, but...

2019-10-23 Thread Ralph Seichter
* Steffen Nurpmeso: > > * Steffen Nurpmeso: > > > I think it is common that S/MIME and SSL certificates are delivered > > > via PKCS12, including the private key. You then seem to extract the > > > individual things [...] > > > > Nope, that is the wrong way round. [...] > > Ok, but that is

Re: a new free smime service, but...

2019-10-23 Thread Steffen Nurpmeso
Hello, sorry for the late reply. Ralph Seichter wrote in <87pninuqns@wedjat.horus-it.com>: |* Steffen Nurpmeso: |> I think it is common that S/MIME and SSL certificates are delivered |> via PKCS12, including the private key. You then seem to extract the |> individual things [...] |

Re: a new free smime service, but...

2019-10-23 Thread Steffen Nurpmeso
P.S.: Steffen Nurpmeso wrote in <20191023224323.kaodd%stef...@sdaoden.eu>: ... ||> I think it is common that S/MIME and SSL certificates are ||> delivered via PKCS12, including the private key. You then seem to ||> extract the individual things like || ||I think this is a severe security

Re: a new free smime service, but...

2019-10-23 Thread Steffen Nurpmeso
Hello, please excuse the late reply. Uwe Brauer via Gnupg-users wrote in <874kzz1var@mat.ucm.es>: |> MFPA via Gnupg-users wrote in <1171562612.20191022004056@my_localhost_AR\ |> >: |>|On Sunday 20 October 2019 at 3:20:41 PM, in |>|, Uwe Brauer via Gnupg-users wrote:- |>| |>|> I just

Re: a new free smime service, but...

2019-10-23 Thread Ralph Seichter
* Steffen Nurpmeso: > I think it is common that S/MIME and SSL certificates are delivered > via PKCS12, including the private key. You then seem to extract the > individual things [...] Nope, that is the wrong way round. The correct sequence to obtain an S/MIME certificate is as follows: 1.

Re: a new free smime service, but...

2019-10-23 Thread Uwe Brauer via Gnupg-users
> MFPA via Gnupg-users wrote in <1171562612.20191022004056@my_localhost_AR>: > |On Sunday 20 October 2019 at 3:20:41 PM, in > |, Uwe Brauer via Gnupg-users wrote:- > | > |> I just found that > |> https://extrassl.actalis.it/portal/uapub/doProcess > | > |> Provides a

Re: a new free smime service, but...

2019-10-23 Thread Uwe Brauer via Gnupg-users
> Hi > On Sunday 20 October 2019 at 3:20:41 PM, in > , Uwe Brauer via Gnupg-users wrote:- > [...] > I'm no expert but their Certificate Policy reads to me that the > private key is compromised right from the start. I think usually the > keys are generated on the subscriber's device and only

Re: a new free smime service, but...

2019-10-22 Thread Steffen Nurpmeso
MFPA via Gnupg-users wrote in <1171562612.20191022004056@my_localhost_AR>: |On Sunday 20 October 2019 at 3:20:41 PM, in |, Uwe Brauer via Gnupg-users wrote:- | |> I just found that |> https://extrassl.actalis.it/portal/uapub/doProcess | |> Provides a free smime certificate. ... |> does

Re: a new free smime service, but...

2019-10-21 Thread MFPA via Gnupg-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Sunday 20 October 2019 at 3:20:41 PM, in , Uwe Brauer via Gnupg-users wrote:- > I just found that > https://extrassl.actalis.it/portal/uapub/doProcess > Provides a free smime certificate. [...] > does somebody know whether there is a

Re: a new free smime service, but...

2019-10-21 Thread MFPA via Gnupg-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Sunday 20 October 2019 at 3:20:41 PM, in , Uwe Brauer via Gnupg-users wrote:- > I just found that > https://extrassl.actalis.it/portal/uapub/doProcess > Provides a free smime certificate. [...] > does somebody know whether there is a

Re: a new free smime service, but...

2019-10-20 Thread Ralph Seichter
* Uwe Brauer via Gnupg-users: > I just obtained a pfx file which I could import, but does somebody > know whether there is a security breach, the way this certificate was > generated? Any process in which I do not create my private key, or in which a third party asks me to provide them with my

a new free smime service, but...

2019-10-20 Thread Uwe Brauer via Gnupg-users
Hi I just found that https://extrassl.actalis.it/portal/uapub/doProcess Provides a free smime certificate. However the process is strange. Usually in comodo, I generated the certificate with my browser, received an email with a link, which I had to open with the browser I applied the

a new free smime service, but...

2019-10-20 Thread Uwe Brauer via Gnupg-users
Hi I just found that https://extrassl.actalis.it/portal/uapub/doProcess Provides a free smime certificate. However the process is strange. Usually in comodo, I generated the certificate with my browser, received an email with a link, which I had to open with the browser I applied the