Re: Benefits of Digital Signed email (are there really any?)

Tech-Archive recommends: Fix windows errors by optimizing your registry

J_Stoner wrote:
Please keep in mind that if you have a disclaimer service running on
your exchange service, most of them can not get into a digitally signed
email in order to include a legal footer or disclaimer. It would break
the integrity of the message.

Now that's a new wrinkle.

So there is more to this signed email business then just adding a certificate?


No, but it's not just a matter of identifying the sender of the
email but also its integrity. Email is not difficult to intercept
or forge outright, and some people have a need to send tamper-proof information by email. Only someone with the sender's private key
can alter the message and still have it and its included signature
verify correctly with the public key.

Many people posting to political discussion groups on Usenet use
digital signatures to avoid inaccurate attributions by less
scrupulous opponents. The original signed post is there on Google
for all to see and verify.
.

Relevant Pages

  • Re: [FDE] Digital Signatures for checking message integrity
    ... I was hoping to get some clarification about "integrity checking" with ... Digital signatures are commonly described as having both the ... introduce a "EV" certificate if their normal certificates could be trusted) ... the most common way to do the latter is to push a new CA ...
    (Pen-Test)
  • Re: Slightly OT: The paperless office: How far can we go?
    ... Digital signatures: I think Jim T. already does that. ... In public key encription, your private key can be used on a plain text ...
    (sci.electronics.design)
  • Re: public key password authentication
    ... server does not have, for example, a private key protected by the ... something that digital signatures were never designed to do ... ... this can be a dual-use attack ... ...
    (sci.crypt)
  • Re: RSACryptoServiceProvider or similar
    ... modified message. ... would be recognized as valid by the recipient, then you could use digital signatures generated using the master's private key. ... You would need to keep that private key private, which, since it's only used at one central location, is not that hard. ... And you would have to ensure that the recipient verifies the digital signature using the corresponding public key, and that's no harder than any other license-checking provision in the software running at the customer site. ...
    (sci.crypt)