Dear community,
I need a solution to enforce a notes-to-notes (same domain) encryption via S/MIME.
Currently Notes/Domino is so clever to use the Domino-encryption for “internal” encryption.
The preferred mail format must be “Keep sender’s format”. re-configure teh person-record to use “MIME” is not a possible way.
Is there any tool which may hook into the client to achieve my need ?
Thanks
Patrick
Subject: Notes-to-Notes encryption via S/MIME
If your Notes users reside in the same Domino organization, then there is no need to use S/MIME. You would then leverage use of Notes Domino native encryption options.
S/MIME is used for send encrypted mail traffic over the internet, due to the fact that the recipient does not not share a public key with the sender.
By default, if Notes user1 encrypts a mail message and sends it to Notes user2, user2’s public key [stored in the Domino Directory] is used to decrypt the document body and read the message.
Alternately, user1 could create a “secret key” and send [mail] that over to user2, who in turn would merge it into their user.id file. Afterwards, then the secret key could be used to send encrypted mail messages from user1 to user2 and not leverage the public key.
Hope this helps your understanding and use of encryption options.
Subject: RE: Notes-to-Notes encryption via S/MIME
I’m aware of this. But I need a “real” End-to-End encryption from the Notes-Client to a BlackBerry device. If I use “native” Domino encryption, the message will be decrypted on the server and re-encrypted by the BES. So there is a gap in encryption.
So I need S/MIME (or PGP) with a certificate on the device.
Cheers,
Patrick
Subject: RE: Notes-to-Notes encryption via S/MIME
You can create you own Internet certificates by use of the Domino Certificate Authority, or, you can buy them through a known and reputable 3rd party Certificate Authority such as Verisign.
If you have a small number of users that need to send/receive encrypted Internet mail [aka S/MIME], then a very quick and fairly inexpensive method to do this is buy an Internet certificate via the 3rd party’s Web site. This is commonly called a “digital ID” or sometimes, a “retail certificate”. This process takes all of about 5 minutes time, a credit card as the individual Internet certificate usually cost $20.00 each, and it’s good for one year, per user.
Also, you can also acquire a quantity of Internet certificates from the 3rd party provider at less than the individual certificate cost mentioned above.
If you have a large number of users that need or want to use S/MIME, then you’ll have to evaluate the cost impact of acquiring 3rd party certificates or, taking the time and effort to setup and configure the Domino Certificate Authority.
Upon acquiring a valid Internet certificate, you can also import it into your browser for use with S/MIME in Domino Web Access [DWA] and also SSL communications.
In any case, if you and your users want to use encrypted mail, you are going to have to fulfill one of the above options in order to start using S/MIME.
I hope this brought further clarification and light to the subject for you.
Good luck in your encrypted mail efforts.