• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1668
  • Last Modified:

Certificate Purposes

Hello,

I have a personal email signing certificate from Thawte. The certificate is issued in my name. The certificate is installed in the system.

If I look at the certificate from Internet Explorer Options/Content/Certificates, or from MMC, I see two purposes of the certificate: "proves your identity to a remote computer" and "Protects email messages".
But if I send an email signed with this certificate, and then look at the certificate already in the email (sent or received - same thing), I see only purpose "Protects email messages". Same in Outlook and in Outlook Express.

Why I don't see "proves your identity" purpose in the certificate in email?
0
Vadim Rapp
Asked:
Vadim Rapp
  • 4
  • 3
1 Solution
 
PowerITCommented:
The identity purpose is used for remote access to systems, not for signing email.

J.
0
 
Vadim RappAuthor Commented:
http://technet2.microsoft.com/windowsserver/en/library/2746cc74-5401-443b-898f-5dc53b1cbcb01033.mspx?mfr=true says

-------------------
Certificates issued to persons
Once you have purchased a certificate and you use it to digitally sign an e-mail message, the message recipient can verify that the message has not been altered during transit and that the message came from you
-------------------

What purpose is used to "verify that the message came from you"?

Thawte website says:

http://www.thawte.com/secure-email/web-of-trust-wot/index.html?click=main-nav-products-wot
-------------------------------
The thawte Web of Trust (WOT) is a Certification system that allows your identity to be validated for use in your Personal Certificate.

Join for free and:

    * Sign your mail
.....
-------------------------------------

so, Thawte is giving inaccurate information, and in fact you can't sign your email with their certificate?
0
 
PowerITCommented:
I think you read this wrong. That's the second purpose: 'Protect email message'. By signing it you also verify your identity, because you have the certificate with the private key.
Signing an email and validating your identity to a remote system are two diferent purposes with the same goal.

J.
0
Improved Protection from Phishing Attacks

WatchGuard DNSWatch reduces malware infections by detecting and blocking malicious DNS requests, improving your ability to protect employees from phishing attacks. Learn more about our newest service included in Total Security Suite today!

 
Vadim RappAuthor Commented:
I understand that "protect email message" means that certificate ensures that the email has not been tampered with wince it left the sender.

But I'm interested in the 2nd purpose. On Thawte, you can get generic email certificate issued to "email user" that protects email message; but you can go further and acquire your personal certificate by showing your id to their notary - see "web of trust" above. Then you get your personal certificate issued to your real name. That, as I understand, is what is achieved by the purpose "proves your identity", and that's what Thawte means when they say "allows your identity to be validated for use in your Personal Certificate". What I don't understand is how sender's identity can be validated by the recipient if the certificate does not say that it can be used for this purpose.
0
 
Vadim RappAuthor Commented:
Discussing this in security-related newsgroup gained much more results.

http://groups.google.com/group/microsoft.public.security/browse_thread/thread/43c941fb3bad6020/c4d142ac3162877f
0
 
PowerITCommented:
I'm sorry, I forgot to continu on this question. Agree the closure.

J.
0
 
Vadim RappAuthor Commented:
if you still have input, we can continue - even though the discussion in the newsgroup gained many responses, there was no final explanation of what actually happened. If you read my last post in there, with the examples about government official and about recording studio, you will see.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now