[imp] S/MIME and centrally stored Certs

[Harakiri]

Hi,

> > S/MIME message locally in the browser. I'm not
> sure javascript would
> > have the functionally to access a locally stored
> cert, that would be up
> 
> No, it doesn't.
> 

Actually, a small correction to the last reply :

Netscape 4.7x was indeed able to sign formular data
locally using javascript - but that was only for
Netscape - im not sure if mozilla was able to do that
too

http://docs.sun.com/source/816-6152-10/sgntxt.htm


> > the browser implementation, but I'm wondering if
> any kind of
> > client-side solution has been explored.
> 

I did develope a client side solution long time ago
which could smime sign/encrypt/decrypt/verify data in
a browser (IE,Mozilla,Opera) using signed applets -
you did - however need a win32 service which did the
actual signing, nowadays it would be possible without
this service i guess.

If you dont like that your smime certs are stored on
one server - you could either buy yourself a HSM and
store the certs there (since horde does command line
calling of openssl it should work perfectly with IMP)
or use a dedicated server were only the certs are
stored (database for example)


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com