OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Alert: S/MIME problems with Outlook '98 - update
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Alert: S/MIME problems with Outlook '98 - update

  • To: NTBUGTRAQLISTSERV.NTBUGTRAQ.COM
  • Subject: Re: Alert: S/MIME problems with Outlook '98 - update
  • From: Russ <Russ.CooperRC.ON.CA>
  • Date: Wed, 27 May 1998 17:48:22 -0400
  • Reply-To: Russ <Russ.CooperRC.ON.CA>
  • Sender: Windows NT BugTraq Mailing List <NTBUGTRAQLISTSERV.NTBUGTRAQ.COM>
I previously reported that Outlook '98 S/MIME encrypted messages were
being sent in cleartext when the user selected "Cancel" from the PSTORES
security dialog.

This information was incorrect. The message is sent encrypted.

MS have acknowledged that the message should not be sent at all, but my
claim that it was being sent unencrypted was erroneous.

FYI, the option to cancel the use of your certificate (from the PSTORES
security dialog) strips the outbound message of your signature, it does
not affect the encryption to the recipient because that encryption is
done based on their public certificate, not involving your certificate.

Cheers,
Russ