I need to do a comparison between S/MIME in Lotus Notes and MS Outlook. I’m fairly familiar with Outlook, it seems to do it reasonably well. Does anybody have detailed info on how Notes does it, e.g.,
-
How a trust store (i.e., candidate trust anchors) is configured
-
How intermediate certificates are found (AIA, static config, other)
-
How CRLs are found (CDP, static config, other)
-
Whether basic, name and policy constraints are validated
-
Whether certificate policies are validated and whether users are allowed to set acceptable policies
-
How recipients’ certificates are discovered (e.g., Domino Directory, user-configured LDAP directories, local stores, etc.)
-
To what extent cert validation is RFC 3280-compliant
-
How a user can configure S/MIME algorithms (e.g., only AES-128 or 3DES is acceptable) for encryption
I’ll appreciate any help on this.
Thanks,
PR