Secure messaging using Signed MIME is it reliable?

Posted by aaronb on Stack Overflow See other posts from Stack Overflow or by aaronb
Published on 2010-03-15T20:57:52Z Indexed on 2010/03/15 20:59 UTC
Read the original article Hit count: 208

Filed under:

smime

We have an automatic reporting and notification system written in .net that sends emails with plain text. We are having to encrypt the messages that we send our clients.

The possible implementation approaches we have:

Send messages as S/Mime email with attachments.
Plain text email with that just contains a link to a web site that will display the message over https.

It seems like S/Mime is a simpler solution, as we won't need to create the web application or secure it.

Our concern is our interoperability with our clients email clients and more importantly their email filtering software.

Has anyone had success or issues deploying a Signed MIME messaging solution?

Related posts about smime

How to OpenSSL decrypt smime.p7m

as seen on Super User - Search for 'Super User'
I have received an email that has no content, just a file called smime.p7m attached. I was looking into the OpenSSL and it's smime module but I cannot figure out exactly how. I must be doing something wrong. I extracted the certificate chain form the p7m file. # openssl pkcs7 -inform DER -in smime… >>> More
mutt, smime, decrypt with one of two different keys

as seen on Server Fault - Search for 'Server Fault'
This is an odd one. We want to have an encrypted e-mail list. There are a few ways to do this, but in the interim what we've done is created a public/private keypair via openssl for our e-mail list ([email protected]) and then distributed the public/private keypair amongst the list participants (ugh)… >>> More
base64-Encoding breaks smime-encrypted emaildata

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm using Mime::Lite to create and send E-Mails. Now I need to add support for S/Mime-encryption and finally could encrypt my E-Mail (the only Perllib I could install seems broken, so I'm using a systemcall and openssl smime), but when I try to create a mime-object with it, the E-Mail will be broken… >>> More
s/mime v3 with M2Crypto

as seen on Stack Overflow - Search for 'Stack Overflow'
Dear list, I would like to send a mail with a s/mime v3 attachment through SMTP. The excellent HOWTO below describes the procedure in detail for s/mime v2. http://sandbox.rulemaker.net/ngps/m2/howto.smime.html I would greatly appreciate any help in doing the same for s/mime v3. Arye. >>> More
Multiple signatures in S/MIME

as seen on Stack Overflow - Search for 'Stack Overflow'
Is it possible to sign a MIME email (RFC 2822) multiple times using S/MIME, so that all signatures are verifiable and retrievable? >>> More

Developer IT