?
Solved

Certificate Purposes

Posted on 2008-06-13
7
Medium Priority
?
1,657 Views
Last Modified: 2008-07-05
Hello,

I have a personal email signing certificate from Thawte. The certificate is issued in my name. The certificate is installed in the system.

If I look at the certificate from Internet Explorer Options/Content/Certificates, or from MMC, I see two purposes of the certificate: "proves your identity to a remote computer" and "Protects email messages".
But if I send an email signed with this certificate, and then look at the certificate already in the email (sent or received - same thing), I see only purpose "Protects email messages". Same in Outlook and in Outlook Express.

Why I don't see "proves your identity" purpose in the certificate in email?
0
Comment
Question by:Vadim Rapp
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
7 Comments
 
LVL 18

Expert Comment

by:PowerIT
ID: 21784588
The identity purpose is used for remote access to systems, not for signing email.

J.
0
 
LVL 40

Author Comment

by:Vadim Rapp
ID: 21784929
http://technet2.microsoft.com/windowsserver/en/library/2746cc74-5401-443b-898f-5dc53b1cbcb01033.mspx?mfr=true says

-------------------
Certificates issued to persons
Once you have purchased a certificate and you use it to digitally sign an e-mail message, the message recipient can verify that the message has not been altered during transit and that the message came from you
-------------------

What purpose is used to "verify that the message came from you"?

Thawte website says:

http://www.thawte.com/secure-email/web-of-trust-wot/index.html?click=main-nav-products-wot
-------------------------------
The thawte Web of Trust (WOT) is a Certification system that allows your identity to be validated for use in your Personal Certificate.

Join for free and:

    * Sign your mail
.....
-------------------------------------

so, Thawte is giving inaccurate information, and in fact you can't sign your email with their certificate?
0
 
LVL 18

Expert Comment

by:PowerIT
ID: 21785016
I think you read this wrong. That's the second purpose: 'Protect email message'. By signing it you also verify your identity, because you have the certificate with the private key.
Signing an email and validating your identity to a remote system are two diferent purposes with the same goal.

J.
0
Does Your Cloud Backup Use Blockchain Technology?

Blockchain technology has already revolutionized finance thanks to Bitcoin. Now it's disrupting other areas, including the realm of data protection. Learn how blockchain is now being used to authenticate backup files and keep them safe from hackers.

 
LVL 40

Author Comment

by:Vadim Rapp
ID: 21785171
I understand that "protect email message" means that certificate ensures that the email has not been tampered with wince it left the sender.

But I'm interested in the 2nd purpose. On Thawte, you can get generic email certificate issued to "email user" that protects email message; but you can go further and acquire your personal certificate by showing your id to their notary - see "web of trust" above. Then you get your personal certificate issued to your real name. That, as I understand, is what is achieved by the purpose "proves your identity", and that's what Thawte means when they say "allows your identity to be validated for use in your Personal Certificate". What I don't understand is how sender's identity can be validated by the recipient if the certificate does not say that it can be used for this purpose.
0
 
LVL 40

Author Comment

by:Vadim Rapp
ID: 21832171
Discussing this in security-related newsgroup gained much more results.

http://groups.google.com/group/microsoft.public.security/browse_thread/thread/43c941fb3bad6020/c4d142ac3162877f
0
 
LVL 18

Expert Comment

by:PowerIT
ID: 21834015
I'm sorry, I forgot to continu on this question. Agree the closure.

J.
0
 
LVL 40

Accepted Solution

by:
Vadim Rapp earned 0 total points
ID: 21834105
if you still have input, we can continue - even though the discussion in the newsgroup gained many responses, there was no final explanation of what actually happened. If you read my last post in there, with the examples about government official and about recording studio, you will see.
0

Featured Post

Need protection from advanced malware attacks?

Look no further than WatchGuard's Total Security Suite, providing defense in depth against today's most headlining attacks like Petya 2.0 and WannaCry. Keep your organization out of the news with protection from known and unknown threats.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

With the rising number of cyber attacks in recent years, keeping your personal data safe has become more important than ever. The tips outlined in this article will help you keep your identitfy safe.
Hey fellow admins! This time, I have a little fairy tale for you. As many tales do, it starts boring and then gets pretty gory. I hope you like it. TL;DR: It is about an important security matter, you should read it if you run or administer Windows …
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
This video Micro Tutorial shows how to password-protect PDF files with free software. Many software products can do this, such as Adobe Acrobat (but not Adobe Reader), Nuance PaperPort, and Nuance Power PDF, but they are not free products. This vide…
Suggested Courses

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question