[imp] S/MIME IMP doesn't verify sender email?
Jan Schneider
jan at horde.org
Sat Nov 8 17:22:23 UTC 2008
Zitat von "vuser1 at test123.ru" <vuser1 at test123.ru>:
> When user1 send email signed by certificate issued to user2, IMP
> says that email verification is OK, though there should be warning,
> I think.
> ----------
> From: *vuser2 at test123.ru *
> To: vuser1 at test123.ru
> Subject: certificate is not mine!
> This message has been digitally signed via S/MIME.
> The message has been verified. *Sender: vuser1 at test123.ru.*
> The S/MIME certificate of Thawte Freemail Member: View/Save in your
> Address Book
> Show this HTML in a new window?
> -----------
> I have certificate issued to vuser2 at test123.ru, imported it to
> vuser1 and send the mail above. Mozilla Thunderbird says that
> message signature is valid, but email address listed in sender
> certificate is different from address that was used to send this
> message.
>
> Is there an option to say IMP to check sender email?
It does that! The verification message clearly shows the certificate's owner.
Jan.
--
Do you need professional PHP or Horde consulting?
http://horde.org/consulting/
More information about the imp
mailing list