Encrypted email

HCL Domino Domino Forum
1

Hi guys.

Does encrypted email work just one direction?

I would like an internet user to send me encrypted email. I do not want to send him encrypted email.

This is what I have done:

  1. I have bought the certificate from Verisign

  2. I installed it into my ID file (following their procedure).

  3. I sent a signed message to the Internet user

  4. The internet user was told that it was a signed message and he added me to his address book.

  5. He tried to send me an encrypted message, but got an error, there is no certificate which can be used…

Looks like my public key is not there or something else is missing.

What am I doing wrong here? Does the other side have to have a digital certificate too?

Thank you guys.

2

Subject: Yes, definitely both sides need certificates to exchange S/MIME (one liner)

3

Subject: Thanks guys.

Lubos, I understand how it works, but I thought that it is enough if I send him an encrypted message. He gets my public key and can encrypt emails to me.But according to Slawek both sides need to have a certificate.

I am going to download a trail certificate for a test user to confirm if certificate has to be on both sides.

4

Subject: Encryption in common

Basically, sender encrypts email using recipients public key. Doing this only owner of private key can decode such emails.

This means you have to send your partner your PUBLIC key. Then you partner will ecrypt new email to you by your public key. When email arrives, your mail client must have your private key and will do decryption.

So export our public key only !

Send this public key to your email partner and ask him to send encrypted email. When received, you should be able to decrypt…