Re: Outlook cannot reply to signed email without certificate

From: David Cross [MS] (dcross_at_online.microsoft.com)
Date: 01/14/05 

Date: Fri, 14 Jan 2005 03:41:39 -0800

Unfortunately, this is how Outlook works. I do not know a workaround for
you in this case. 

-- 
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Top Whitepapers:
Auto-enrollment whitepaper: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/autoenro.mspx
Best Practices for implementing Windows Server 2003 PKI: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx
Troubleshooting Certificate Status and Revocation whitepaper: 
http://www.microsoft.com/technet/security/topics/crypto/tshtcrl.mspx
Windows Server 2003 web enrollment and troubleshooting guide: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx
Windows Server 2003 web enrollment and troubleshooting guide: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx
"selkin" <stewart_elkin@hotmail.com> wrote in message 
news:1105605704.001300.242440@c13g2000cwb.googlegroups.com...
> When a normal (no certs) user receives a signed email from someone
> else, Outlook will not let them reply without having their own
> certificates. These certs are not necessary to reply.
>
> As the only holder of an email signing certificate, I should be able to
> send a signed email to anyone else in the company and they will be able
> to verify it. This works fine. However, when any other user then tries
> to REPLY to this signed email, Outlook intervenes with a prompt for
> them to get a new digital ID, i.e. asking them to configuire their
> email and signing certs. Why is this necessary? (Even when the second
> user gets their own certs, they can reply to the original mail withouth
> signing their own reply , thus proving that they do not need any certs
> to reply).
> Does anyone have any insight into what is happening here? Thanks.
>

Relevant Pages

  • Re: Stuck with 40-bit RC2
    ... > would have expected Outlook to associate this with the ... Turns out that CAs can issue certs with the sMIMECapabilities ... a signed email from Netscape Messenger; ...
    (microsoft.public.security)
  • Re: Security flaw in how Outlook verifies digital signatures
    ... of course the headers cannot ... However digitally signing a document is ... > of a digitally signed email would be hacked instead... ... Other email clients, including Outlook ...
    (microsoft.public.outlook)
  • Outlook cannot reply to signed email without certificate
    ... When a normal user receives a signed email from someone ... Outlook will not let them reply without having their own ... certificates. ... These certs are not necessary to reply. ...
    (microsoft.public.platformsdk.security)
  • Re: OT: Mystery partially solved (was Microsoft does it again?!)
    ... from each of my accounts using each of my certs and saving ... Very interesting and sort of a security failure of Outlook. ... and exporting are the same people). ... the intended recipient to determine whether the recipient can support ...
    (sci.crypt)
  • Re: OT: Mystery partially solved (was Microsoft does it again?!)
    ... specifies what encryption algorithm they should use to ... Is it necessary to use this dialog for Outlook Express to send ... book) to get the sender's cert and cipher preference stored ... from each of my accounts using each of my certs and saving ...
    (sci.crypt)
Quantcast